replit-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the
!commandsyntax in the SKILL.md file to perform environment checks when the skill is loaded. These commands, such asnode --versionandecho $REPL_SLUG, are used for diagnostic purposes to identify the runtime environment and are not used for malicious exfiltration. - [DATA_EXPOSURE]: The diagnostic script collects system state information, including environment variables and process lists. The script mitigates credential exposure by using shell parameter expansion (e.g.,
${DATABASE_URL:+SET}) to confirm a variable is set without logging its actual value. The skill also explicitly instructs the user to manually redact sensitive tokens and API keys before sharing the generated bundle. - [COMMAND_EXECUTION]: The skill provides bash scripts that execute standard diagnostic tools such as
tar,ps,curl, andnode. These are used locally within the workspace to gather troubleshooting data and do not download or execute code from untrusted remote sources.
Audit Metadata