infra-incident-debugging
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a list of standard Nomad CLI commands for infrastructure diagnostics, such as
nomad node status,nomad alloc logs, andnomad alloc exec. These commands are appropriate for the skill's stated purpose of debugging production incidents. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze external data sources which could be controlled by an attacker to influence agent behavior.
- Ingestion points: The agent is directed to collect evidence from application logs (
nomad alloc logs), job specifications, and deployment manifests inSKILL.mdandreferences/01-overview.md. - Boundary markers: There are no instructions provided to the agent regarding the use of delimiters or specific prompts to ignore potential instructions embedded within the logs or configuration files being analyzed.
- Capability inventory: The agent has the capability to execute shell commands and map operational paths, which could be misdirected if the processed logs contain malicious injection strings.
- Sanitization: The skill does not mention any sanitization or filtering logic for the external content before it is processed by the agent.
Audit Metadata