Debugging
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because its core functionality requires processing untrusted external data.
- Ingestion points: The 'Usage' section in
SKILL.mdidentifies that the agent accepts code snippets, error messages, stack traces, and logs directly from users. - Boundary markers: There are no explicit instructions or delimiters (such as XML tags or triple-backticks with ignore-instructions) provided to help the agent distinguish between its own logic and instructions that might be embedded in the user-provided logs or code.
- Capability inventory: The skill leverages the agent's ability to read files, analyze code, and use debugging tools (pdb, Chrome DevTools, etc.), which could be misused if the agent is manipulated by instructions hidden in the data.
- Sanitization: The methodology does not include a step for sanitizing or validating the input data before processing it.
Audit Metadata