diagnose-issue
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs legitimate codebase analysis and problem diagnosis.
- [COMMAND_EXECUTION]: The skill instructions permit the use of local runtime commands. However, these are specifically restricted to diagnostic purposes and must be "cheap" and "local", which is standard behavior for development-focused AI agents and does not constitute a high-risk pattern in this context.
- [DATA_EXPOSURE]: While the skill involves reading codebase files and documentation, it does not include any instructions or patterns for exfiltrating this data to external services. It prioritizes verifying claims against the "current checkout".
- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests untrusted data from the codebase (files, logs, Jira links) and has the capability to execute local commands.
- Ingestion points: User issue input and codebase files (e.g., source code, logs, documentation) described in the "Build A Code Map" section of
SKILL.md. - Boundary markers: None explicitly defined to separate untrusted data from system instructions.
- Capability inventory: File system reading, string searching, and execution of local runtime commands as specified in the workflow.
- Sanitization: No specific sanitization or filtering of external content is mentioned before processing or inclusion in output.
Audit Metadata