debugging-by-evidence
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill establishes comprehensive debugging protocols that prioritize evidence, isolation, and bounded investigations. It includes explicit prohibitions against unauthorized remote actions and deployments, ensuring the agent operates within a restricted workspace. No malicious code, exfiltration patterns, or bypass techniques were found.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it is designed to ingest and process external data such as user reports and incident logs. 1. Ingestion points: Untrusted data enters the context through symptom reports and incident records as described in SKILL.md and rules/runnable-signal.md. 2. Boundary markers: SKILL.md provides a mitigation by instructing the agent to quote user-provided symptoms verbatim. 3. Capability inventory: The agent is authorized to write diagnostic tests and instrumentation as specified in SKILL.md and rules/probing.md. 4. Sanitization: The methodology of tracing backward to contract violations and separating triggers from handling serves as a structural sanitization mechanism.
Audit Metadata