bug-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze untrusted external data, which could be used to manipulate the agent's behavior.
- Ingestion points: According to the workflow, the skill reads "Bug reports (phenomena + steps + evidence)", "Code repositories", and "Logs/Request-Response data" (E3 evidence) to perform analysis.
- Boundary markers: The skill does not specify the use of delimiters or provide instructions for the agent to ignore potentially malicious commands embedded within the logs or bug reports it processes.
- Capability inventory: The skill has file-writing capabilities, including appending data to existing report templates (
../core/report-template.md) and creating new markdown files ({项目}/Bug条目_{日期}.md) on the local filesystem. - Sanitization: There are no documented procedures for sanitizing or validating the external content (such as log snippets or code segments) before it is processed or written into persistent storage files.
Audit Metadata