diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data such as user symptoms, environment details, and build failure logs, which could potentially contain malicious instructions.
- Ingestion points:
SKILL.md(symptom data, environment data, failure output, and relevant code). - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the ingested data.
- Capability inventory: The instructions imply the capability to execute shell commands to reproduce bugs, instrument code, and verify fixes.
- Sanitization: The skill specifically requires the agent to redact secrets in captured commands and logs, reducing the risk of accidental credential exposure.
- [SAFE]: The skill includes links to external GitHub repositories for Matt Pocock and Addy Osmani as informational source material. These are standard documentation references and do not involve runtime script execution or automated package installation.
Audit Metadata