diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a workflow for ingesting and processing untrusted external data, such as bug traces, network payloads, and error logs, which could potentially contain malicious instructions targeting the agent.
- Ingestion points: The agent is instructed to use captured traces, payloads, and event logs in
SKILL.md. Additionally, thescripts/hitl-loop.template.shscript captures human-provided error messages through a CLI prompt. - Boundary markers: The instructions do not specify the use of delimiters or boundary markers to separate data from the agent's instructions.
- Capability inventory: The skill encourages the agent to execute shell commands, tests, CLI tools, and HTTP requests (
curl) based on the analyzed artifacts. - Sanitization: There are no instructions for sanitizing or escaping the content of ingested payloads before they are processed by the agent.
- [COMMAND_EXECUTION]: The skill requires the agent to build and run a reproduction loop, which involves executing arbitrary commands including unit tests, integration tests, CLI tools with fixture inputs, and HTTP scripts in
SKILL.mdandscripts/hitl-loop.template.sh.
Audit Metadata