Debugging
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and debug user-supplied code and task descriptions, which creates an ingestion point for potentially malicious instructions embedded in the data being processed.
- Ingestion points: The skill accepts a "task description" through the agent interface as documented in
references/GUIDE.md. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to isolate the user input or treat it as untrusted content.
- Capability inventory: The skill includes a local validation script (
scripts/validate.py) and utilizes standard agent capabilities for code analysis and file system checks. - Sanitization: No explicit sanitization, filtering, or escaping of the user-provided content is implemented in the skill instructions.
Audit Metadata