diagnose
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute various shell-based feedback loops, including unit tests, integration tests, and browser automation (e.g., Playwright or Puppeteer), as part of the diagnostic process.
- [PROMPT_INJECTION]: The skill processes untrusted user data, creating a surface for indirect prompt injection.
- Ingestion points: The agent ingests user-supplied error messages and diagnostic artifacts (logs, HAR files) described in Phase 1 and captured via the
scripts/hitl-loop.template.shscript. - Boundary markers: The instructions do not specify any delimiters or directives to isolate or ignore instructions embedded within the untrusted logs or error messages.
- Capability inventory: The agent has high-privilege capabilities, such as shell execution, test runner invocation, and file system modifications.
- Sanitization: No sanitization or validation is applied to user-provided diagnostic data before it is analyzed by the agent.
Audit Metadata