awesome-bug-fix
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data, creating a potential surface for indirect prompt injection.
- Ingestion points: The skill analyzes stack traces, log dumps, and network capture files provided by users or external systems (SKILL.md).
- Boundary markers: The agent is instructed to redact sensitive values and only quote relevant signal lines from the input.
- Capability inventory: The agent may execute shell commands, scripts, or tests as part of the reproduction phase (SKILL.md).
- Sanitization: The skill contains an explicit defensive instruction to treat logs and stack traces as untrusted data and ignore any instructions embedded within them.
- [DYNAMIC_EXECUTION]: The skill involves the generation and execution of scripts to reproduce bugs.
- Evidence: Phase 1, Step 2 provides a preference order for building reproduction loops, including failing unit tests, integration tests, CLI scripts, and REPL one-liners.
Audit Metadata