scenario-report
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill instructions emphasize privacy by requiring the redaction of API keys, PII, and internal identifiers before generating a report. It defines a specific whitelist of safe fields to extract from diagnostic tools to prevent accidental exposure of account metadata.
- [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted user input (bug descriptions) and tool outputs. It mitigates potential injection risks by instructing the agent to show the full draft to the user and wait for explicit confirmation before posting to GitHub or sending via email.
- [EXTERNAL_DOWNLOADS]: The skill contains instructions for the agent to suggest the user manually install missing dependencies from the official vendor repository using standard package management tools (npx).
Audit Metadata