root-cause-finder
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze external data such as source code, logs, and system state during debugging sessions. This creates a surface where malicious instructions could be embedded within the data being analyzed (e.g., hidden in comments or string literals within a codebase).
- Ingestion points: Processes external source code, logs, and descriptions of system behavior provided in the agent's context (SKILL.md).
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the analyzed data.
- Capability inventory: The skill itself is text-based, but agents utilizing this skill often possess tools for file system access, terminal execution, and environment inspection.
- Sanitization: No sanitization or validation of the input data is described in the workflow.
Audit Metadata