deco-incident-debugging
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by consuming external, untrusted data to drive its debugging and autonomous fix logic. Ingestion points include the structured incident alert JSON inputs and retrieved error log entries. The skill does not employ boundary markers or sanitization to sequester this external content. The capability inventory includes shell execution via
bunandnpx, file system modifications, and automated git workflow management, which allows the agent to act upon potentially malicious payloads.\n- [COMMAND_EXECUTION]: The skill uses shell commands likegit log,grep,bun run typecheck, andnpx tsxto investigate the repository and validate configurations. While appropriate for the skill's purpose, these instructions invoke local system tools and scripts.
Audit Metadata