debug
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes logs from external applications, which serves as an ingestion point for untrusted data that could influence the agent's behavior.
- Ingestion points: The agent reads logs directly from
/tmpor via theviewer.mjsweb server. - Boundary markers: Absent. The skill does not provide delimiters or instructions for the agent to ignore potentially malicious content within logs.
- Capability inventory: The agent has the ability to execute shell commands and modify the user's source code.
- Sanitization: Absent. The
viewer.mjsscript uses.innerHTMLto render log data without escaping, which could lead to Cross-Site Scripting (XSS) in the developer's browser if the application logs contain malicious payloads. - [COMMAND_EXECUTION]: The skill provides instructions for potentially destructive shell commands.
- The suggested use of
git checkout -- .orgit restore .to clean up instrumentation can lead to permanent data loss of all uncommitted changes if the agent executes these commands without verifying that the repository was clean before starting the debug session.
Audit Metadata