error-debugging
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to utilize various command-line tools for environment diagnostics and verification, including
git,adb,flutter,gradlew,cargo, and debuggers likegdbandlldb. - [DATA_EXFILTRATION]: The skill contains a dedicated 'Critical constraints' section that explicitly forbids sending crash logs,
.ipsfiles, or mapping files to external services, citing privacy concerns regarding device identifiers and internal symbols. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes untrusted stack traces and log files provided by users.
- Ingestion points: Stack traces and log files captured via Step 1 of the workflow.
- Boundary markers: The instructions do not define specific delimiters to isolate log content from other instructions.
- Capability inventory: The agent is permitted to read and edit files, and execute shell commands via the
Bashtool. - Sanitization: No specific sanitization or filtering logic is prescribed for the ingested log content.
Audit Metadata