diagnose
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external, potentially untrusted data such as bug reports, captured network traces, and log files to drive automated reproduction loops.
- Ingestion points: User bug descriptions, replayed traces, and external log files (SKILL.md).
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands in the processed data.
- Capability inventory: The skill utilizes script generation, file system writes, network requests (via curl), and shell command execution (SKILL.md, scripts/hitl-loop.template.sh).
- Sanitization: No sanitization or validation of the ingested bug reports or traces is mentioned.
- [DYNAMIC_EXECUTION]: The instructions direct the agent to dynamically construct and execute various reproduction artifacts, including failing tests, HTTP scripts, and headless browser automation (SKILL.md).
- [COMMAND_EXECUTION]: The skill relies on executing shell commands, CLI tools, and the provided hitl-loop.template.sh script to confirm and verify bug fixes.
Audit Metadata