atlas-debug
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The instructions in
references/diagnosis/diagnosing-bugs.mdlead the agent to dynamically create and execute reproduction harnesses, such as shell scripts and browser automation scripts (Playwright/Puppeteer), at runtime. - [EXTERNAL_DOWNLOADS]: The skill manifest (
SOURCE-MANIFEST.json) identifies an external repository as its upstream source. Additionally,references/explaining-bugs.mdrequires the installation of thepelepackage via NPM for visual diagram generation. - [COMMAND_EXECUTION]: The skill utilizes extensive shell command functionality for diagnostic tasks, including
curloperations, human-in-the-loop bash scripts, and automated test runners. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes untrusted external artifacts like network traces, logs, and HAR files. Combined with the agent's ability to execute commands and install packages, this introduces a surface where malicious content in analyzed files could influence agent execution.
- Ingestion points: Files like HAR traces, event logs, and core dumps processed during Phase 1 and Phase 2 of the diagnosis loop.
- Boundary markers: No specific prompt delimiters are defined to isolate untrusted content from instructions, though secret redaction is mandated.
- Capability inventory: Includes shell access, NPM package installation, and browser automation.
- Sanitization: Instructions specify redacting credentials using
<REDACTED>but do not provide for the sanitization of embedded commands or prompt instructions in data files.
Audit Metadata