investigate
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches diagnostic runbooks and query examples using the
pandatool via therunbooks://protocol. These resources are vendor-provided instructions for debugging Ethereum networks. - [COMMAND_EXECUTION]: Runs environment discovery commands such as
kurtosis enclave lsandpanda datasourcesto identify Ethereum networks available for debugging. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Processes text output from
kurtosisandpandaCLI tools inSKILL.mdto resolve network targets. - Boundary markers: No explicit delimiters are used for the tool output.
- Capability inventory: Executes CLI tools and writes report files to the
/workspace/directory. - Sanitization: No specific sanitization of the environment discovery output is performed before processing.
Audit Metadata