debug-runbook
Warn
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill instructs the agent to read local files that typically contain sensitive secrets and credentials, specifically
.env,.dev.vars,wrangler.toml, and GitHub Actions workflow files in.github/workflows/. - [CREDENTIALS_UNSAFE]: The skill directs the agent to execute
wrangler secret listto retrieve and display configured secrets from the Cloudflare worker environment. - [COMMAND_EXECUTION]: The skill relies on the execution of multiple system-level CLI tools and package managers, including
wrangler,gh,npx,pnpm,detox,curl,openssl, anddig, to collect system information and perform diagnostic tests. - [COMMAND_EXECUTION]: The skill suggests running build and test commands like
npx expo prebuild --cleanandnpx stryker run, which execute code from the local project and its dependencies. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted data from logs and network requests while having significant system capabilities. (Ingestion points:
wrangler tail, system logs (iOS/Android), and browser console/network logs; Boundary markers: Absent; Capability inventory: Access to sensitive files and various system commands; Sanitization: Absent).
Audit Metadata