flexport-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill accesses application logs located in
/var/log/app/and system environment variables. It includes specificsedcommands to redact Bearer tokens and environment variable values (e.g.,sed 's/Bearer [^ ]*/Bearer ***REDACTED***/g') to prevent accidental credential leakage in the debug bundle. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources including Flexport API responses and local log files. While this creates a potential attack surface for indirect prompt injection, the data is stored in a local archive for human review and the skill does not automatically process this data as instructions. Capability inventory includes Bash (curl, tar, jq) and Grep. Sanitization is performed via regex redaction of secrets.
Audit Metadata