log-driven-debugging
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFENO_CODEPROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of instructional markdown within SKILL.md. It does not include any standalone scripts, binaries, or automated command execution sequences.
- [PROMPT_INJECTION]: The skill establishes a workflow that requires the agent to ingest and analyze untrusted log data provided by a user, creating a surface for indirect prompt injection.
- Ingestion points: User-provided logs, filtered by a specific prefix, are ingested into the agent's context during the 'Analysis pass'.
- Boundary markers: Absent. The skill does not instruct the agent to use specific delimiters or protective framing when processing the external log content.
- Capability inventory: The agent is instructed to perform code modifications (to add instrumentation) and perform causal analysis on the resulting data.
- Sanitization: Absent. There is no guidance on sanitizing or validating the contents of the logs before they are processed by the LLM.
Audit Metadata