qe-debug-loop
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from multiple external sources which could contain malicious instructions designed to influence the agent.
- Ingestion points: The agent captures and processes output from reproduction commands (Phase 1), database queries using
sqlite3(Phase 2), and test results fromnpm test(Phase 5). - Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard potential instructions embedded within the captured command or database outputs.
- Capability inventory: The skill possesses the ability to execute arbitrary shell commands (reproduction,
sqlite3,grep,npm test) and modify files (Fix phase). - Sanitization: No sanitization or validation of the captured output is performed before the agent uses it to form hypotheses or determine its next actions.
- [COMMAND_EXECUTION]: The skill is designed to autonomously execute commands on the host system to validate bugs, query databases, and run test suites. While these are legitimate debugging actions, the autonomous nature means the agent will perform these operations based on its interpretation of the symptom and the environment.
Audit Metadata