lindy-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses dynamic context markers in
SKILL.mdto execute shell commands at load time. These commands are limited tonode --version,python3 --version, andcurl --version. These are benign version checks intended to verify the local environment's readiness for debugging tasks. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external API sources and instructions from the Lindy dashboard, creating a potential surface for indirect injection if that data were maliciously crafted.
- Ingestion points: Data is ingested from the Lindy API (
api.lindy.ai) and manual inputs from the agent's task history (SKILL.md). - Boundary markers: There are no explicit boundary markers or delimiters defined for the agent to distinguish between data and instructions when processing these diagnostics.
- Capability inventory: The skill possesses the
Bashtool (used forcurlandnpx) andWritetool (used to save the support bundle inreferences/implementation-guide.md). - Sanitization: The skill provides manual sanitization guidance, instructing the user to remove credentials and personal data before sharing the bundle outside the workspace.
- [EXTERNAL_DOWNLOADS]: The skill references the
@lindy-ai/sdkpackage and usesnpxto execute scripts. These resources are directly related to the vendor's purpose and the skill's primary function of debugging Lindy AI instances. - [DATA_EXFILTRATION]: The skill performs connectivity tests to well-known services including Slack, Google APIs, and Notion. These checks are used to verify integration health and do not involve sending sensitive user data to these or any unknown third-party domains.
Audit Metadata