debug-triage
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill guides the agent to use established system diagnostic tools including kubectl, dig, curl, openssl, ss, journalctl, and pg_isready. The workflow explicitly prohibits state-changing operations without manual approval.
- [DATA_EXPOSURE]: The skill analyzes system logs and environment states via journalctl and kubectl to localize errors. This visibility is restricted to standard infrastructure metadata and operational logs required for triage.
- [EXTERNAL_DOWNLOADS]: The skill includes connectivity probes using curl. The recommended usage pattern discards the response body to focus solely on HTTP status codes, effectively mitigating risks from processing untrusted remote data.
- [PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection because it processes untrusted log data. (1) Ingestion points: system logs from journalctl and pod statuses from kubectl describe. (2) Boundary markers: Not specified in instructions. (3) Capability inventory: Subprocess execution of network and cluster management tools. (4) Sanitization: No specific filtering for log output is mentioned. However, given the primary diagnostic purpose, this is a standard operating surface.
Audit Metadata