palantir-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill accesses sensitive configuration via the
.envfile and environment variables (FOUNDRY_TOKEN,FOUNDRY_CLIENT_SECRET). It includes proactive redaction logic usingsedto mask values in the collected configuration and only reports the presence/length of tokens in the summary report. - [DATA_EXFILTRATION]: Performs an API connectivity test using
curlto a user-defined hostname (FOUNDRY_HOSTNAME) including theFOUNDRY_TOKENin the Authorization header. This is a legitimate diagnostic function for the service. - [COMMAND_EXECUTION]: Executes shell commands via
bashto gather system information, check installed Python packages, and search log files for specific error patterns. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from local
*.logfiles to extract error context. - Ingestion points: Reads contents of
*.logand.envfiles usinggrepandsed. - Boundary markers: None explicitly present for log reading, though data is redirected to a temporary file.
- Capability inventory: Uses
curl,tar, and standard shell utilities (grep,sed,mkdir). - Sanitization: Implements
sed-based redaction of variable values in the.envfile before including them in the diagnostic bundle.
Audit Metadata