debugging
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions create an ingestion surface for untrusted data, which could potentially contain malicious instructions intended to influence the agent.
- Ingestion points: The agent is guided to read and analyze error messages, full stack traces, command outputs, and system files such as
.noodle/orders.jsonand.noodle.toml(SKILL.md). - Capability inventory: The skill involves the use of shell-based diagnostic tools, including
tmux ls,grep, and Git operations (git diff,git log,git bisect) (SKILL.md). - Boundary markers: Absent. The instructions do not define delimiters or provide warnings to disregard embedded commands within logs or error data.
- Sanitization: Absent. No validation or filtering is specified for the data retrieved from external logs or command outputs.
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands to investigate and reproduce technical failures.
- Evidence: The documentation explicitly references running failing commands and diagnostic utilities such as
tmuxandgitto verify system state.
Audit Metadata