solo-diagnose
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to perform various diagnostic tasks, such as running tests, CLI tools, and the providedscripts/hitl-loop.template.shfor interactive debugging. - [DYNAMIC_EXECUTION]: The diagnostic workflow involves creating and running local scripts (e.g., reproduction harnesses, instrumentation scripts) to verify bug behavior and test hypotheses. This is a core component of the feedback loop methodology described in Phase 1 and Phase 4.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection because it is designed to ingest and analyze external data such as application logs, captured network traces, and error reports.
- Ingestion points: The skill processes external content through log files, replayed traces, and user-provided error messages captured by the
hitl-loop.template.shscript. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the ingested logs or traces.
- Capability inventory: The agent has access to powerful tools including
Bash,Write,Edit, andRead, which could be targeted by instructions hidden in processed data. - Sanitization: The skill does not implement specific sanitization or filtering for the external diagnostic data it consumes.
Audit Metadata