light-diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill methodology requires the agent to ingest and process untrusted external data to build feedback loops, creating a potential attack surface.
- Ingestion points: The agent is instructed to process user failure reports, captured network traces (HAR files), log dumps, and event payloads to construct reproduction scenarios.
- Boundary markers: The skill relies on natural language instructions requiring the agent to redact secrets and authentication headers from captured artifacts.
- Capability inventory: To fulfill its purpose, the skill encourages the agent to execute shell commands, run test suites, perform network requests via
curl, and drive UI testing through headless browser scripts. - Sanitization: The skill provides manual instructions for the agent to identify and replace secrets with
<REDACTED>, though it lacks automated technical sanitization or schema validation for ingested data.
Audit Metadata