diagnose
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data such as error messages, logs, and test results.
- Ingestion points: The 'Establish the evidence' section in SKILL.md directs the agent to read external error logs, traces, and failing test results.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore potential commands within the ingested diagnostic data.
- Capability inventory: The skill utilizes capabilities for executing reproduction commands, instrumenting code (file edits), and delegating to other tools like 'tdd'.
- Sanitization: No explicit sanitization or validation of the input diagnostic data is described.
Audit Metadata