intercom-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto interact with the Intercom API (api.intercom.io) and status page (status.intercom.com) for diagnostic purposes. These are official service endpoints. - [COMMAND_EXECUTION]: The implementation script uses
sedandgrepto redact sensitive patterns (Bearer tokens, emails, and .env values) before including them in the final tarball. This follows security best practices for log collection. - [DATA_EXPOSURE]: The skill accesses local files such as
logs/app.logand.envto build the diagnostic bundle. However, it explicitly includes redaction steps (sedmasking) to ensure credentials and PII are not exposed in the final output. - [SAFE]: The network requests are limited to official Intercom domains for health checks and status information, and the skill's primary purpose is troubleshooting as advertised.
Audit Metadata