diagnose
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to generate and execute various scripts locally, including unit/integration tests, curl commands, and browser automation scripts (Playwright/Puppeteer), to establish a feedback loop for bug reproduction.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes external, potentially untrusted data such as HAR files, network traces, and event logs during the reproduction phase.
- Ingestion points: Phase 1 (item 5) and Phase 2 involve reading captured traces, HAR files, and error messages from the file system (SKILL.md).
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when reading these external artifacts.
- Capability inventory: The agent is authorized to execute shell scripts (scripts/hitl-loop.template.sh), run CLI commands, and perform browser automation.
- Sanitization: No explicit sanitization or validation of the log/trace content is performed before the agent processes it.
Audit Metadata