diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the agent to execute various shell commands, including unit tests, curl requests, and headless browser scripts, to establish a feedback loop for debugging purposes.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data, creating an attack surface for indirect injection.
- Ingestion points: The agent processes human-provided input through the
scripts/hitl-loop.template.shscript, as well as external artifacts like application logs, traces, and error messages described in Phase 1 ofSKILL.md. - Boundary markers: The skill includes a specific 'Redact' section that mandates the replacement of sensitive information with
<REDACTED>markers. - Capability inventory: The agent performs subprocess calls for testing, network operations via curl, and filesystem interactions.
- Sanitization: The skill provides explicit instructions to filter sensitive data and redact authentication headers from captured artifacts.
- [DATA_EXFILTRATION]: While the skill involves capturing potentially sensitive artifacts such as network traces or logs, it emphasizes a proactive security posture by requiring the agent to redact all credentials and secrets before displaying or processing the data.
Audit Metadata