rubber-duck
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions and metadata align with its stated purpose of assisting in debugging. No evidence of malicious intent, data exfiltration, or persistence mechanisms was found.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input by asking for problem descriptions and then reflecting those descriptions back to the user. This creates a potential surface for indirect prompt injection if the user provides malicious instructions within their problem articulation.
- Ingestion points: User answers to the three questions defined in SKILL.md (Step 2).
- Boundary markers: The skill does not define specific delimiters for user-provided content in the 'Reflect Back' phase (Step 4).
- Capability inventory: The skill is restricted to basic file and shell read operations (cat, grep, head, ls, read) as defined in the frontmatter.
- Sanitization: No explicit sanitization or validation of the user's input is performed before the agent processes it.
Audit Metadata