resolve-qa-feedback
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon external QA reports and tester feedback. This creates a surface for indirect prompt injection where an attacker could embed malicious instructions within a bug report to influence the agent's behavior during reproduction or fixing phases.
- Ingestion points: Tester-reported QA feedback and reports described in the skill's instructions (SKILL.md).
- Boundary markers: No specific delimiters or instructions to ignore embedded commands are present to separate untrusted report data from the agent's core instructions.
- Capability inventory: The skill leverages commands like
/diagnosing-bugsand/develop(SKILL.md), which involve environment interaction and code modification. - Sanitization: There is no evidence of input validation or sanitization for the content of the QA reports before they are processed by the agent.
Audit Metadata