motel-debug
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
bunxto run@kitlangton/motel, which is a vendor-owned package for local telemetry ingestion and server management. - [COMMAND_EXECUTION]: Executes shell commands including
motel start,motel status, andmotel stopto manage the background daemon for the local OTLP server. - [INDIRECT_PROMPT_INJECTION]: The agent ingests external data in the form of application traces and logs via
curlrequests to the local Motel server (e.g.,http://127.0.0.1:27686/api/*). This data informs the agent's debugging hypotheses and code modifications. - Ingestion points: Log and span search endpoints on the local Motel server.
- Boundary markers: Employs specific
#region motel debugand#endregion motel debugcomment markers to delimit temporary instrumentation. - Capability inventory: The skill possesses file system access to modify source code and execute local CLI tools.
- Sanitization: Guidelines explicitly instruct the agent to avoid logging sensitive information such as secrets, tokens, or PII.
Audit Metadata