bug-reporting-excellence
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines tasks for enhancing and triaging user-submitted bug reports, creating a surface for potential injection attacks where malicious data could influence agent logic.
- Ingestion points: The 'Enhance Report' and 'Triage Bug' tasks in SKILL.md process 'userSubmittedBug' and 'bugDescription' strings.
- Boundary markers: The instructions do not define delimiters or specific 'ignore' directives for the processed content.
- Capability inventory: The skill utilizes an agent fleet (qe-quality-analyzer, qe-production-intelligence, qe-flaky-test-hunter) for triage, duplicate detection, and log analysis.
- Sanitization: The skill provides no instructions for validation or sanitization of input data.
- [SAFE]: The skill references standard JSON schemas and vendor-specific domains (agentic-qe.dev) for validation purposes, which represents standard development behavior.
Audit Metadata