diagnose-bug
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it is designed to ingest and process untrusted external data (e.g., error reports, logs, and request payloads) to diagnose bugs.
- Ingestion points: Data enters the context via the 'Capture the failing case' and 'Reproduce and gather signals' steps in SKILL.md.
- Boundary markers: No explicit markers are used to separate untrusted diagnostic data from the agent's instructions.
- Capability inventory: The agent has the capability to read project files and execute local test runners and diagnostic scripts.
- Sanitization: The instructions include a safeguard to redact secrets and personal data before summarizing findings, and require user confirmation ('Do you want me to implement this fix?') before any changes are made.
Audit Metadata