triage-bug
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute shell commands such as
bundle exec rspecorbundle exec rubyto run failing tests. This is the intended functional behavior of a debugging tool and is considered safe within the context of software development workflows. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from bug reports and reproduction steps provided by users, which serves as an entry point for potential indirect prompt injection attacks.
- Ingestion points: Bug reports, error messages, and reproduction steps processed in the "Core Process" section of SKILL.md.
- Boundary markers: The skill provides a "HARD-GATE" process to constrain the agent's logic, but does not implement strict delimiters for user-provided data.
- Capability inventory: The skill facilitates command-line execution for running tests and file system modifications for creating reproduction specs.
- Sanitization: No explicit sanitization or filtering of user-provided input is defined in the triage instructions.
Audit Metadata