reproduce
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as bug reports and stack traces which represents an attack surface for indirect prompt injection.
- Ingestion points:
SKILL.mdinstructions for classifying reports and building failing inputs. - Boundary markers: The instructions do not specify the use of delimiters when processing user-provided bug descriptions.
- Capability inventory: Includes shell command execution for testing and git operations.
- Sanitization: No specific sanitization of external input is described.
- [COMMAND_EXECUTION]: The skill guides the agent to execute repository-specific test commands and git operations to automate the debugging process.
- Evidence: Instructions in
SKILL.mdto run test scripts frompackage.json,Makefile, orgo testand instructions inreferences/bisect.mdfor runninggit bisectand management of isolated worktrees. - [DYNAMIC_EXECUTION]: The skill involves the creation and execution of new code at runtime to verify bugs and automate bisection.
- Evidence:
SKILL.mdStep 2 (Build the smallest failing input) involves writing and running new tests, andreferences/bisect.mdStep 1 involves creating a predicate script (predicate.sh) forgit bisect.
Audit Metadata