dx-diagnose
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various shell commands to build a 'red-capable loop'. Explicitly mentioned commands include
curl,CLI diff,headless-browser script,git bisect run, andfuzz/property loop. These are used to verify and minimize bugs within the user's project environment. - [DYNAMIC_EXECUTION]: The skill requires the generation and execution of temporary scripts and test harnesses, such as 'throwaway harnesses' and 'headless-browser scripts'. This involves the agent creating executable code based on its diagnosis and then running it to confirm the bug reproduction.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data in the form of user-provided symptoms and project-specific files.
- Ingestion points: The
[symptom]argument hint and the project'sfoundation/glossary.mdfile. - Boundary markers: None identified. The skill does not specify delimiters or instructions to ignore embedded commands within the symptoms or files being analyzed.
- Capability inventory: The skill has the ability to execute shell commands (
curl,git bisect, etc.) and write files to the project directory (diagnosis.md). - Sanitization: No explicit sanitization or validation of the input symptom or project data is mentioned before these are used to formulate reproduction commands.
Audit Metadata