debug-false-positive
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external code snippets and projects to debug tool behavior, creating a surface for indirect prompt injection.
- Ingestion points: Minimal fixtures (Step 2) and consumer projects (Step 7) are ingested into the agent's context.
- Boundary markers: The skill does not provide instructions to use delimiters or ignore embedded instructions when processing external code.
- Capability inventory: The workflow includes executing shell commands for building (cargo build) and running binaries.
- Sanitization: No sanitization or validation of the untrusted code content is required before the agent processes it.
Audit Metadata