investigate
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard local development commands such as
mix compile,mix ecto.migrate, andmix testto diagnose the state of the application. - [INDIRECT_PROMPT_INJECTION]: The skill operates on untrusted data from bug descriptions and application logs, creating a potential surface for indirect prompt injection. Ingestion points: User-supplied
$ARGUMENTSand runtime logs retrieved viamcp__tidewave__get_logsinSKILL.md. Boundary markers: The instructions do not define specific delimiters or guardrails to isolate ingested data from the agent's control logic. Capability inventory: The agent can perform database queries and code evaluation throughmcp__tidewave__execute_sql_queryandmcp__tidewave__project_eval, and run shell commands viamixandgrep. Sanitization: There is no explicit sanitization or filtering of the content retrieved from external log files before it is processed by the agent. - [DYNAMIC_EXECUTION]: The skill utilizes
mcp__tidewave__project_evalto evaluate Elixir code snippets at runtime to test debugging hypotheses.
Audit Metadata