diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data such as network traces, log dumps, and HAR files to diagnose issues. This introduces a vulnerability surface for indirect prompt injection attacks.
- Ingestion points: Captured artifacts, network traces, HAR files, and user-provided log dumps (SKILL.md, Phase 1).
- Boundary markers: There are no specific delimiters or instructions to ignore embedded commands in the ingested data, although the skill emphasizes redacting sensitive information.
- Capability inventory: The agent is instructed to run shell commands, HTTP scripts, tests, and headless browser automation (SKILL.md, Phase 1).
- Sanitization: The skill requires redacting all secrets with '' (Phase 1, 'Redact') but does not specify filtering for malicious instructions within the captured artifacts.
- [COMMAND_EXECUTION]: The skill instructs the agent to create and run various feedback loops, such as 'curl' commands, CLI invocations, and test suites. This is a core part of the debugging workflow and is expected behavior.
- [DYNAMIC_EXECUTION]: The agent is guided to develop and execute dynamic scripts, throwaway harnesses, and test cases to reproduce failures, including the adaptation of the 'scripts/hitl-loop.template.sh' template.
Audit Metadata