diagnose
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external, potentially untrusted diagnostic artifacts such as HAR files, network traces, and log dumps.
- Ingestion points: External artifacts including HAR files, logs, and core dumps are specified as inputs for the feedback loop in Stage 1.
- Boundary markers: The instructions do not mandate the use of delimiters or 'ignore instructions' markers when the agent processes these external files.
- Capability inventory: The agent possesses capabilities to execute shell commands, perform network operations via curl, and run browser automation scripts.
- Sanitization: The skill lacks requirements for sanitizing or validating the content of these external artifacts before they are analyzed.
- [DYNAMIC_EXECUTION]: The diagnostic workflow depends on the agent creating and running various temporary scripts, including one-off harnesses, test suites, and the provided human-in-the-loop bash template, to reproduce reported bugs.
- [COMMAND_EXECUTION]: The instructions direct the agent to use various CLI tools and network utilities like curl and git to perform testing, reproduction, and regression analysis.
Audit Metadata