debug
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The workflow in
SKILL.mdexplicitly instructs the agent to create and run commands, tests, and scripts to reproduce symptoms. This capability is central to the skill's purpose but allows for arbitrary code execution within the environment.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the ingestion of external data.\n - Ingestion points: Processes untrusted bug reports, error logs, and repro steps defined in
SKILL.md.\n - Boundary markers: Lacks delimiters or instructions to the agent to treat input data as non-executable text.\n
- Capability inventory: Possesses the ability to execute shell commands, run scripts, and write to the filesystem as described in the
SKILL.mdworkflow.\n - Sanitization: No input validation or sanitization mechanisms are described for the provided bug reports.
Audit Metadata