plugin-runtime-debug
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to read and analyze host API source code from paths like
~/.dsh/source/current. This ingestion of external data constitutes an indirect prompt injection surface. - [INDIRECT_PROMPT_INJECTION]: Ingestion points:
SKILL.mdinstructs the agent to open the implementing package in the DSH source checkout and read the actual methods. Boundary markers: Absent. Capability inventory: Diagnostic analysis of logic and state mapping. Sanitization: Absent.
Audit Metadata