diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill's diagnostic process requires the agent to ingest and analyze external, untrusted data such as log files, HAR files, and captured network traces (Phase 1, 4). This exposure creates a surface for indirect prompt injection attacks if those artifacts contain malicious instructions.
- Ingestion points: User-provided diagnostic artifacts (Phase 1) and codebase files (Phases 1, 2, 5).
- Boundary markers: The instructions do not prescribe the use of delimiters or safety warnings when processing external content.
- Capability inventory: The skill utilizes shell command execution (bash), script creation (Phases 1, 10), and potential UI automation (Playwright/Puppeteer).
- Sanitization: No explicit content validation, escaping, or filtering of ingested diagnostic data is mentioned.
- [COMMAND_EXECUTION]: The skill requires the agent to generate and execute various scripts for building reproduction feedback loops (Phase 1).
- Evidence: The methodology involves creating 'Curl / HTTP scripts', 'CLI invocations', and 'HITL bash scripts' derived from a provided template (
scripts/hitl-loop.template.sh).
Audit Metadata