bug-diagnosis
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, including bug symptoms, error logs, and reproduction steps, which could potentially contain malicious instructions intended to subvert the agent's diagnostic logic.
- Ingestion points: External data provided via the 'Required Inputs' section (symptoms, repro steps, context) in
SKILL.md. - Boundary markers: Absent; the skill does not define specific delimiters or 'ignore' instructions for the ingested bug data.
- Capability inventory: The methodology involves file system modifications ('comment-out'), version control commands ('git bisect'), and executing tests to verify fixes.
- Sanitization: The instructions do not specify any validation or sanitization procedures for the input logs or scripts.
Audit Metadata