agents-debug
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill provides instructions to install the
uvpackage manager using a remote script fromastral.sh(curl -LsSf https://astral.sh/uv/install.sh | sh). This source is a well-known provider for this tool. - [PRIVILEGE_ESCALATION]: The skill includes commands to manage system services via
sudo systemctland terminate conflicting processes usingkillto resolve port occupancy during local development sessions. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data by reading agent execution traces and CloudWatch logs.
- Ingestion points: Fetches recent logs and execution traces via
agentcore traces get,agentcore logs, andaws logs tail(SKILL.md, Step 3 and 4). - Boundary markers: No explicit instructions are provided to the agent to disregard instructions that might be embedded within the log data being parsed.
- Capability inventory: The skill utilizes
Bash,Read,Grep, andGlobtools to interact with the environment and analyze logs. - Sanitization: There is no explicit sanitization of log content before it is presented to or processed by the agent.
Audit Metadata