app-platform-troubleshooting
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends using container images from a personal GitHub Container Registry (
ghcr.io/bikramkgupta/debug-python) and references source code from a personal GitHub repository (github.com/bikramkgupta/do-app-debug-container). These resources are used for infrastructure validation but are not hosted under an official vendor or trusted organization namespace. - [REMOTE_CODE_EXECUTION]: The skill requires the installation of the
do-app-sandboxPython package to facilitate shell access to containers. This package is an external dependency that enables remote command execution and does not originate from a verified vendor organization. - [COMMAND_EXECUTION]: The skill provides the agent with arbitrary shell access to running containers via the Sandbox SDK, allowing for broad command execution, filesystem modification, and network diagnostics within the user's environment.
- [CREDENTIALS_UNSAFE]: The skill explicitly directs the agent to dump all environment variables (
env | sort) and sensitive connection strings (echo $DATABASE_URL). This practice exposes plaintext credentials and secrets directly to the agent's context during troubleshooting sessions. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data that could contain malicious instructions.
- Ingestion points: The agent reads application logs (build, runtime, and crash logs) and arbitrary file contents from the target container.
- Boundary markers: No instructions or delimiters are defined to prevent the agent from interpreting instructions found within these logs or files.
- Capability inventory: The agent has high-privilege capabilities, including shell execution (
app.exec), application specification updates (doctl apps update), and file write access (app.filesystem.write_file). - Sanitization: No sanitization is performed on logs or file contents before they are processed by the agent.
- [DYNAMIC_EXECUTION]: The skill generates Python script files (e.g.,
/tmp/db_test.py) from string templates at runtime and executes them on the remote container to perform database connectivity checks.
Audit Metadata