developer-troubleshooting-docs
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources like support tickets, issues, and community logs to generate documentation, presenting an indirect prompt injection surface.\n
- Ingestion points: Data is sourced from exports of tickets, issues, docs search logs, and telemetry as described in
SKILL.mdandreferences/signal-mining.md.\n - Boundary markers: The skill does not explicitly define delimiters for untrusted data during processing.\n
- Capability inventory: The agent executes a local Python script (
scripts/error-cluster.py) and is instructed to run verification commands in a test environment.\n - Sanitization: The utility script
scripts/error-cluster.pynormalizes variable data like UUIDs and URLs.SKILL.mdandreferences/discoverability-and-metrics.mdprovide clear instructions to redact customer identifiers and credentials before publication.\n- [COMMAND_EXECUTION]: The skill involves the execution of local scripts and test commands.\n - Evidence: The skill instructs the agent to run a bundled Python script (
scripts/error-cluster.py) to cluster error logs. It also outlines a verification protocol requiring the agent to reproduce failures and execute fixes in a test environment to validate the accuracy of the documentation.
Audit Metadata