diagnosis
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No malicious instruction overrides, role-play injections, or safety bypass attempts were detected. The skill instructions focus entirely on a software diagnostic methodology.
- [DATA_EXFILTRATION]: No sensitive file access patterns, credential harvesting, or unauthorized network operations were identified. The
allowed-tools(Read, Grep) are appropriate for the skill's stated purpose of log and code analysis. - [REMOTE_CODE_EXECUTION]: The skill does not perform remote script downloads or execution. The metadata contains a link to the author's GitHub repository for the skill graph project, which is used for documentation purposes.
- [COMMAND_EXECUTION]: The skill does not contain executable commands or shell scripts. It uses a structured markdown format to describe a diagnostic process.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process potentially untrusted data such as error logs and request payloads during debugging. While this is an inherent surface for indirect prompt injection, the skill follows a standard engineering triage workflow and does not automate high-risk actions based on this input.
- Ingestion points: Processes error logs, terminal output, and environment facts (SKILL.md, Section 3).
- Boundary markers: Absent in instructions.
- Capability inventory: Limited to the provided
ReadandGreptools. - Sanitization: Not explicitly defined, relying on the agent's underlying safety layers.
Audit Metadata