troubleshoot
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data, such as issue descriptions and error logs, to perform diagnostics and apply fixes. This behavior creates a vulnerability to indirect prompt injection attacks where instructions embedded in the analyzed data could manipulate the agent's investigation path or proposed solutions.\n
- Ingestion points: The
issueargument in the/troubleshootcommand and error logs accessed via the Read tool.\n - Boundary markers: No explicit markers or "ignore embedded instructions" directives are defined to separate the diagnostic data from the agent's core instructions.\n
- Capability inventory: The skill leverages high-capability tools including Bash for runtime diagnostics, Grep for pattern detection, and file Read/Write capabilities for applying fixes.\n
- Sanitization: There is no evidence of input validation, escaping, or sanitization of the external data before it is processed by the agent.
Audit Metadata