diagnose-a-red-run
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Git commands such as
git fetchandgit worktreeto create a separate environment for comparing branch behavior. These operations are restricted to temporary directories (/tmp) and represent standard developer troubleshooting practices. - [INDIRECT_PROMPT_INJECTION]: The instructions involve the agent reading and interpreting potentially untrusted external data, specifically CI logs and test artifacts, to classify failures.
- Ingestion points: CI job logs, test suite outputs, and unvalidated test artifacts referenced in
SKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified for the log content.
- Capability inventory: The skill has access to Git commands and process management capabilities (e.g., killing processes by port).
- Sanitization: The skill does not define specific sanitization or filtering for the artifacts being analyzed. However, this ingestion is necessary for the primary purpose of diagnosis.
Audit Metadata