magento-issue-debugger
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data, such as system logs, error reports, and code snippets from a Magento environment. This creates a surface for indirect prompt injection if malicious instructions are embedded in the analyzed data.
- Ingestion points: The skill directs the agent to gather and analyze logs from
var/log/, PHP error logs, and web server logs. - Boundary markers: There are no instructions provided to treat content within logs as untrusted or to ignore potentially embedded instructions.
- Capability inventory: The skill provides the agent with various Magento CLI commands (
bin/magento) for clearing caches, reindexing, and changing deployment modes. - Sanitization: No sanitization or filtering of log content is specified before analysis.
- [COMMAND_EXECUTION]: The skill documents the use of standard Magento CLI commands necessary for environment management and troubleshooting.
- Evidence: Includes commands like
bin/magento deploy:mode:set developer,bin/magento cache:clean, andbin/magento setup:upgradein theSKILL.mdfile. - [EXTERNAL_DOWNLOADS]: The skill references official Adobe documentation and mentions standard industry tools for performance profiling.
- Evidence: References
developer.adobe.comand identifies tools such as Blackfire, XHProf, and New Relic for performance analysis inSKILL.md.
Audit Metadata