debug
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external scripts and API responses, which presents an attack surface for instructions embedded in that data.
- Ingestion points: Data enters the agent's context through user problem descriptions (Phase 0a), reproduction script outputs (Phase 0b), and interactive probe results (Phase 2).
- Boundary markers: The skill does not currently specify the use of clear delimiters or instructions to prevent the agent from following directives that might be present in the debugged data.
- Capability inventory: The skill utilizes "Bash", "Edit", "Write", and "Read" tools to interact with the environment, providing a significant capability tier for any potential injection.
- Sanitization: Robust redaction rules are defined in "references/report-template.md" to prevent the leakage of API keys and passwords in exported reports, which mitigates data exfiltration risks.
Audit Metadata