error-explainer
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and interpret compiler or runtime error messages provided by users, which creates a surface for indirect prompt injection.
- Ingestion points: The agent reads error messages and source code provided by the user (SKILL.md).
- Boundary markers: The instructions lack explicit delimiters or warnings to the agent to ignore any natural language instructions that might be embedded within the pasted error logs.
- Capability inventory: The skill has no dangerous capabilities; it is restricted to text generation and does not have access to tools for file system writes, network requests, or command execution.
- Sanitization: There is no evidence of input filtering or sanitization of the provided error content.
Audit Metadata