diagnose
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes external data sources (code, documentation, command outputs), creating an attack surface for indirect prompt injection.
- Ingestion points: Files such as CONTEXT.md, ADRs, and codebase source, along with terminal outputs from curl and test commands.
- Boundary markers: None explicitly defined in the instructions.
- Capability inventory: Ability to execute shell commands and modify files.
- Sanitization: No data validation or sanitization routines are specified.
- [DYNAMIC_EXECUTION]: The skill uses script templates to facilitate diagnostic reproduction loops.
- Evidence: The script scripts/hitl-loop.template.sh is intended to be modified and executed by the agent to interact with users during the debugging process.
Audit Metadata