bug-hunt-swarm
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
rg,git diff,git log, andgit showfor gathering bug-related evidence from the repository and system logs. These tools are used in a read-only capacity as part of the intended diagnostic workflow.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as application logs, stack traces, and reproduction outputs which may contain untrusted content. \n - Ingestion points: The skill collects logs, stack traces, and repository history as described in
SKILL.md. \n - Boundary markers: Explicit instructions in
SKILL.mdmandate that all investigation steps remain read-only and strictly forbid file modifications, patching, or state-mutating actions across all sub-agents. \n - Capability inventory: The skill is restricted to read-only file system inspection using
gitandrgas documented in the tool usage steps. \n - Sanitization: Input data is not programmatically sanitized, relying on clear agent instructions to maintain diagnostic focus and prevent command execution from data.
Audit Metadata