p-diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by processing user-provided bug reports to drive diagnostic operations.
- Ingestion points: User descriptions of symptoms, reproduction steps, and environments in SKILL.md.
- Boundary markers: Not defined; the instructions do not specify delimiters or warnings for the agent to ignore instructions embedded within the user's bug report.
- Capability inventory: The workflow involves executing CLI commands, making HTTP requests, and modifying files to insert diagnostic probes (Steps 2 and 5).
- Sanitization: The skill includes a clear directive to mask authentication headers and personal information in logs and outputs, which serves as a mitigation for data exposure during the debugging process.
Audit Metadata