project-platform-diagnose
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and analyze output from failing commands, creating a potential surface for indirect prompt injection from system or application error messages.\n
- Ingestion points: Capturing exit status and relevant command output during diagnostic reproduction steps defined in SKILL.md.\n
- Boundary markers: The skill explicitly instructs to "Record only relevant non-secret facts" and "Never dump the full environment or expose credentials", which serves as a mitigation but not a complete boundary.\n
- Capability inventory: The workflow involves reproducing failures and potentially implementing fixes (code, config, setup), implying broad system interaction capabilities.\n
- Sanitization: The instructions emphasize distinguishing observations from hypotheses and require authorization for permanent changes, providing a layer of human-in-the-loop sanitization.\n- [NO_CODE]: The skill consists entirely of instructional markdown and does not include any scripts, executables, or configuration files, which reduces the direct attack surface.
Audit Metadata