catalyst-debug
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a suite of
catalyst_*tools to interact with the Diagrid Catalyst platform. These tools are used for querying resource status, logs, and metrics, as well as performing administrative actions like pausing, rerunning, or terminating workflows. - [DATA_EXFILTRATION]: The instructions explicitly address the handling of sensitive data. It warns the agent about data-sharing levels (metadata vs. full) and instructs it to report withheld fields as restricted rather than empty. It specifically mentions that secrets like API keys and private keys are scrubbed by the platform and should never be printed or requested from the user.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data from external tool outputs, such as workflow inputs, outputs, and logs. It mitigates the risk of acting on malicious instructions embedded in this data by requiring a clear chain of evidence for every diagnosis and requiring explicit user confirmation before any mutating or destructive action (e.g.,
catalyst_terminate_workflow_run,catalyst_purge_workflow_runs).
Audit Metadata