debug
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [NO_CODE]: The skill is composed exclusively of natural language instructions and does not contain any executable scripts or binary files.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process untrusted external data such as logs, traces, and code, creating a surface for potential indirect prompt injection.
- Ingestion points: Artifacts like logs, traces, and fixtures are ingested for diagnosis in SKILL.md.
- Boundary markers: There are no specific delimitation instructions defined to isolate untrusted data from the agent's instructions.
- Capability inventory: The skill assumes access to powerful tools like CLI/API interfaces and debuggers.
- Sanitization: It explicitly advises the agent to sanitize artifacts and avoid credential exposure, which helps mitigate risk.
Audit Metadata