orca-issue
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data in the form of symptoms, logs, and context provided by the user (W01, W02). This data is then used to guide high-capability actions such as modifying code via
safe-changeand executing reproduction scripts/tests (W04). There are no explicit boundary markers or sanitization steps mentioned to prevent malicious instructions embedded in logs from influencing the agent's behavior during the fixing process. - Ingestion points: User-provided symptoms, logs, and error messages in the Triage (W01) and Repro-first (W02) steps.
- Boundary markers: Absent. The instructions do not specify delimiters for external content.
- Capability inventory: File writing (
safe-change), command execution (running tests/repro scripts), and version control operations (verify-before-commit). - Sanitization: Absent. The skill does not describe any filtering or validation of the ingested log content.
Audit Metadata