diagnose-a-red-run

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes Git commands such as git fetch and git worktree to create a separate environment for comparing branch behavior. These operations are restricted to temporary directories (/tmp) and represent standard developer troubleshooting practices.
  • [INDIRECT_PROMPT_INJECTION]: The instructions involve the agent reading and interpreting potentially untrusted external data, specifically CI logs and test artifacts, to classify failures.
  • Ingestion points: CI job logs, test suite outputs, and unvalidated test artifacts referenced in SKILL.md.
  • Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified for the log content.
  • Capability inventory: The skill has access to Git commands and process management capabilities (e.g., killing processes by port).
  • Sanitization: The skill does not define specific sanitization or filtering for the artifacts being analyzed. However, this ingestion is necessary for the primary purpose of diagnosis.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 01:21 AM
Security Audit — agent-trust-hub — diagnose-a-red-run