itsol-bug-debugging
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze potentially untrusted external data, which creates a surface for indirect prompt injection attacks where malicious instructions could be embedded in the analyzed data. \n
- Ingestion Points: As described in
references/02-praca-nad-naprawa-bledu.mdandreferences/04-debugowanie-krok-po-kroku.md, the agent is directed to collect and process evidence from logs, traces, data snapshots, request payloads, and API responses. \n - Boundary Markers: There are no explicit instructions or delimiters defined to separate external evidence from the agent's internal instructions or to warn the agent to ignore embedded commands. \n
- Capability Inventory: The agent possesses capabilities to modify source code and execute testing frameworks, such as the referenced
itsol-tdd-workflowskill, which could be triggered by injected instructions. \n - Sanitization: The workflow does not include any documented steps for sanitizing, escaping, or validating the content of external evidence before it is processed by the model.
Audit Metadata