debugging-experiments
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local Python script
srm_check.pyto perform Sample Ratio Mismatch (SRM) analysis. The script uses only the Python standard library and contains no network or sensitive file system operations. - [COMMAND_EXECUTION]: Instructions are provided for running SQL queries via a PostHog-specific tool. The instructions include explicit security warnings and remediation steps for preventing SQL injection by escaping user-supplied literals before substitution.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external support tickets and database results. It incorporates a specific security policy instructing the agent to treat all ingested content as data rather than instructions, effectively mitigating potential injection attempts from ticket text or event properties.
- [PRIVILEGE_ESCALATION]: The skill provides detailed guidance on authorization, requiring agents to verify a requester's specific project access before pulling data to prevent accidental information disclosure through staff-level impersonation tools.
Audit Metadata