troubleshoot-binlog-mcp
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution for Diagnostics: The skill utilizes standard .NET CLI tools (
dotnet --info,dotnet nuget list source,dotnet dnx) to perform environment diagnostics. These commands are used to identify SDK version mismatches and feed configuration errors, which is consistent with the skill's intended troubleshooting functionality. - Indirect Prompt Injection Surface: The skill is designed to process external data sources such as host startup logs, error messages, and package search results. This represents a potential surface for indirect prompt injection; however, the skill mitigates this by instructing the agent to evaluate evidence logically rather than following embedded commands, and includes specific logic for redacting sensitive information from that data.
- Data Exposure Safeguards: The instructions include explicit security guidance to prevent the accidental exposure of sensitive information. It specifically directs the agent to redact credentials, private tokens, and feed URLs encountered during NuGet configuration inspection.
- Policy Compliance: The skill emphasizes maintaining system integrity by advising against bypassing enterprise security policies, such as certificate validation or mandatory package source mapping, during the recovery process.
Audit Metadata