bug-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from external bug reports and source code repositories.\n
- Ingestion points: Processes user-provided bug reports (phenomena, reproduction steps, evidence) and code repositories during root cause analysis (SKILL.md).\n
- Boundary markers: There are no explicit instructions to use delimiters or markers to distinguish untrusted bug report content from internal instructions.\n
- Capability inventory: The skill involves reading project files, writing to markdown reports (report-template.md), and performing code searches (grep). The reproduction phase suggests the agent follow user-provided steps, which could involve code execution if the agent is equipped with such tools.\n
- Sanitization: The instructions do not specify any validation, filtering, or escaping of the external data ingested from bug reports or code files.
Audit Metadata