diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill generates and modifies bash scripts (based on
hitl-loop.template.sh) that are intended to be executed by the user to collect diagnostic information. This is the primary intended behavior of the skill for troubleshooting purposes. - [PROMPT_INJECTION]: The skill analyzes untrusted output from applications and user observations, which creates a surface for indirect prompt injection (Category 8). * Ingestion points: Runtime information, logs, and error messages gathered through the
capturehelper inscripts/hitl-loop.template.sh. * Boundary markers: No specific delimiters or boundary markers are defined for the ingested data. * Capability inventory: Generation and modification of shell scripts and analysis of system state. * Sanitization: The skill contains explicit instructions to redact secrets with<REDACTED>and filter authentication headers, but these measures focus on data exposure rather than preventing instruction injection from the logs.
Audit Metadata