diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill workflow involves processing untrusted external data such as network traces, logs, HAR files, and core dumps to identify bug causes. This ingestion of external content constitutes an attack surface for indirect prompt injection. The skill partially mitigates this risk by explicitly instructing the agent to redact keys and sensitive data before processing.
- [DYNAMIC_EXECUTION]: To establish a feedback loop, the skill encourages the agent to generate and run localized scripts, tests, and CLI calls. This includes using a provided template
scripts/hitl-loop.template.shto drive human-in-the-loop interactions. These execution capabilities are restricted to the local environment and are necessary for the primary purpose of software debugging.
Audit Metadata