app-platform-troubleshooting

Warn

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends using container images from a personal GitHub Container Registry (ghcr.io/bikramkgupta/debug-python) and references source code from a personal GitHub repository (github.com/bikramkgupta/do-app-debug-container). These resources are used for infrastructure validation but are not hosted under an official vendor or trusted organization namespace.
  • [REMOTE_CODE_EXECUTION]: The skill requires the installation of the do-app-sandbox Python package to facilitate shell access to containers. This package is an external dependency that enables remote command execution and does not originate from a verified vendor organization.
  • [COMMAND_EXECUTION]: The skill provides the agent with arbitrary shell access to running containers via the Sandbox SDK, allowing for broad command execution, filesystem modification, and network diagnostics within the user's environment.
  • [CREDENTIALS_UNSAFE]: The skill explicitly directs the agent to dump all environment variables (env | sort) and sensitive connection strings (echo $DATABASE_URL). This practice exposes plaintext credentials and secrets directly to the agent's context during troubleshooting sessions.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data that could contain malicious instructions.
  • Ingestion points: The agent reads application logs (build, runtime, and crash logs) and arbitrary file contents from the target container.
  • Boundary markers: No instructions or delimiters are defined to prevent the agent from interpreting instructions found within these logs or files.
  • Capability inventory: The agent has high-privilege capabilities, including shell execution (app.exec), application specification updates (doctl apps update), and file write access (app.filesystem.write_file).
  • Sanitization: No sanitization is performed on logs or file contents before they are processed by the agent.
  • [DYNAMIC_EXECUTION]: The skill generates Python script files (e.g., /tmp/db_test.py) from string templates at runtime and executes them on the remote container to perform database connectivity checks.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 15, 2026, 04:53 PM