debug
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data such as error messages, stack traces, and log excerpts during the debugging workflow.
- Ingestion points: Phase 1 (Symptom Capture) and Phase 4 (Log Inspection) involve collecting error text and log excerpts from the environment.
- Boundary markers: The instructions do not specify the use of delimiters or clear separation between system instructions and the untrusted data being analyzed.
- Capability inventory: The skill commands the execution of shell-based test runners (Phase 3, 6), git operations (Phase 2), and log retrieval commands (Phase 4).
- Sanitization: There is no evidence of sanitization, filtering, or escaping for the external data before it is presented to the agent's context.
Audit Metadata