trace
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a specialized orchestration logic for debugging and system analysis. It guides the model through a scientific process of observation, hypothesis generation, and evidence verification.
- [PROMPT_INJECTION]: The skill's primary function involves ingesting and analyzing potentially untrusted external data, creating an attack surface for indirect prompt injection.
- Ingestion points: The skill instructions specify reading 'code, tests, configs, docs, logs, outputs, and benchmark artifacts' from the environment (SKILL.md).
- Boundary markers: There are no explicit markers or instructions defined to prevent the agent from following commands embedded within the analyzed data sources.
- Capability inventory: The skill orchestrates a 'tracer' agent with read access to project files; however, the instructions do not explicitly grant or use high-risk capabilities like arbitrary command execution or network exfiltration.
- Sanitization: No evidence of data sanitization, filtering, or validation is present in the skill's instructions.
Audit Metadata