intercom-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Bash with
curl,jq,grep, andsedto interact with the Intercom API, check platform status, and redact sensitive information from local logs and environment files. - [DATA_EXPOSURE]: The script explicitly implements redaction logic (Step 6) to remove tokens and email addresses from logs and
.envfiles before including them in the diagnostic bundle. It correctly identifiesINTERCOM_ACCESS_TOKENas a secret and avoids logging its value. - [EXTERNAL_DOWNLOADS]: The skill fetches platform status and incidents from
status.intercom.com, which is a well-known service associated with the Intercom vendor. This is considered safe per the trust scope rules.
Audit Metadata