diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to run various local commands such as test suites, CLI tools, and the provided
scripts/hitl-loop.template.sh. These actions are scoped to the project environment and intended for standard development workflows. - [REMOTE_CODE_EXECUTION]: The agent is encouraged to generate and run local diagnostic scripts, including headless browser scripts (Playwright/Puppeteer) and custom harnesses. These are used locally to create minimal reproductions of reported bugs.
- [DATA_EXFILTRATION]: While the skill involves reading log files, traces, and environment configuration, these actions are essential for the debugging process. There is no evidence of unauthorized network transmission or sensitive data harvest.
- [PROMPT_INJECTION]: The skill's primary input consists of bug reports and diagnostic artifacts (e.g., HAR files). Although these could theoretically contain adversarial content, the skill's structured approach and emphasis on falsifiable hypotheses mitigate the risks associated with indirect prompt injection.
Audit Metadata