magento-issue-debugger

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data, such as system logs, error reports, and code snippets from a Magento environment. This creates a surface for indirect prompt injection if malicious instructions are embedded in the analyzed data.
  • Ingestion points: The skill directs the agent to gather and analyze logs from var/log/, PHP error logs, and web server logs.
  • Boundary markers: There are no instructions provided to treat content within logs as untrusted or to ignore potentially embedded instructions.
  • Capability inventory: The skill provides the agent with various Magento CLI commands (bin/magento) for clearing caches, reindexing, and changing deployment modes.
  • Sanitization: No sanitization or filtering of log content is specified before analysis.
  • [COMMAND_EXECUTION]: The skill documents the use of standard Magento CLI commands necessary for environment management and troubleshooting.
  • Evidence: Includes commands like bin/magento deploy:mode:set developer, bin/magento cache:clean, and bin/magento setup:upgrade in the SKILL.md file.
  • [EXTERNAL_DOWNLOADS]: The skill references official Adobe documentation and mentions standard industry tools for performance profiling.
  • Evidence: References developer.adobe.com and identifies tools such as Blackfire, XHProf, and New Relic for performance analysis in SKILL.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 06:47 AM