debug-rule
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
opentaintCLI tool to perform reachability analysis and debug security rules. - [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and analyze SARIF and YAML files produced by the scanner. These files are considered untrusted data as they reflect the state of the scanned project.
- Ingestion points:
debug-ifds-fact-reachability.sarif,report.sarif, anddropped-external-methods.yaml. - Boundary markers: No explicit markers are used to warn the agent about embedded instructions in the scanned data.
- Capability inventory: The skill can execute shell commands via the
opentainttool and read/write files in the project directory. - Sanitization: No sanitization of the input files is specified.
Audit Metadata