diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest untrusted external data such as logs, traces, environment outputs, and issue descriptions to diagnose bugs. This creates an attack surface for indirect prompt injection if the processed data contains malicious instructions.
- Ingestion points: Processes logs, traces, environment output, and issue descriptions in
SKILL.md(Step 1 and Step 2). - Boundary markers: While it mandates redacting secrets, the skill does not explicitly require the use of boundary markers or delimiters when interpolating external data into the agent's context.
- Capability inventory: The workflow includes executing shell commands for unit/integration tests, CLI fixtures, and network requests (curl) to build feedback loops.
- Sanitization: The skill contains explicit instructions to redact secrets from commands, logs, and screenshots before storage or display.
Audit Metadata