flexport-debug-bundle

Pass

Audited by Gen Agent Trust Hub on Sep 13, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE]: The skill accesses application logs located in /var/log/app/ and system environment variables. It includes specific sed commands to redact Bearer tokens and environment variable values (e.g., sed 's/Bearer [^ ]*/Bearer ***REDACTED***/g') to prevent accidental credential leakage in the debug bundle.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources including Flexport API responses and local log files. While this creates a potential attack surface for indirect prompt injection, the data is stored in a local archive for human review and the skill does not automatically process this data as instructions. Capability inventory includes Bash (curl, tar, jq) and Grep. Sanitization is performed via regex redaction of secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 13, 2026, 08:37 AM
Security Audit — agent-trust-hub — flexport-debug-bundle