debug
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied error messages and repository files, which creates a surface for indirect instructions to influence agent behavior.
- Ingestion points: The skill ingests user input via the $ARGUMENTS variable and reads project-level files such as AGENTS.md and documentation within the lessons directory.
- Boundary markers: The skill utilizes <bug_description> tags to encapsulate and delimit user-provided error messages, providing a structural boundary.
- Capability inventory: The skill possesses the ability to list directory contents (ls), read files (Read), inspect repository history (git log, git diff), and call specialized subagents for workflow tasks.
- Sanitization: No explicit sanitization or escaping of external content is performed prior to interpolation, though the skill logic is constrained to diagnostic and debugging activities.
Audit Metadata