diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of various diagnostic tools and automated scripts, including
curlfor HTTP requests,git bisectfor regression tracking, and headless browser frameworks like Playwright or Puppeteer. These are utilized within the Phase 1: Build a feedback loop section to establish reproducible failure signals. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze external data sources such as
CONTEXT.md, Architecture Decision Records (ADRs), HAR files, log dumps, and core dumps (Phase 1). This represents a potential attack surface where malicious instructions hidden in external data could attempt to influence the agent's behavior. The capability inventory includes shell execution and network operations, though the skill provides no explicit sanitization for instructions embedded in these data artifacts beyond secret redaction. - [SAFE]: The skill explicitly enforces a secret redaction policy in the 'Redact' section, requiring the agent to replace credentials with
<REDACTED>and use environment variables instead of hardcoding secrets in commands or artifacts. This demonstrates a proactive security posture for handling sensitive data during troubleshooting.
Audit Metadata