bug-investigator
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user reports of bugs and unexpected behavior, which serves as a data ingestion point for untrusted content.
- Ingestion points: User bug reports, error logs, and external codebase content (referenced in SKILL.md).
- Boundary markers: None present; the instructions do not specify delimiters or warnings to ignore instructions embedded in reports.
- Capability inventory: The skill uses file searching (
grep,search_file_content), version control history (git log), and the ability to modify code and execute tests (pytest, jest, mocha). - Sanitization: No sanitization or validation of the input bug report is described before processing.
Audit Metadata