maintainx-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the
!commandsyntax in theSKILL.mdfile to execute shell commands (node --version,python3 --version, and a check for the presence ofMAINTAINX_API_KEY) at skill load time to provide environment context to the agent. - [COMMAND_EXECUTION]: The skill contains several scripts intended for execution via the
Bashtool to perform diagnostics. These includecurlfor API connectivity tests,nslookupfor DNS resolution checks, andnpmcommands for package management verification. - [DATA_EXFILTRATION]: The skill includes logic to generate 'Support Bundles' and log API requests to local JSON files. While these scripts include redaction logic (redacting
Authorizationheaders and truncating API keys to the first 8 characters), they are designed to aggregate diagnostic data from the environment and API responses for troubleshooting.
Audit Metadata