debugger
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves processing potentially untrusted external data such as error logs and stack traces, which serves as a vector for indirect prompt injection attacks.
- Ingestion points: The skill is instructed to 'Capture error message and stack trace' and 'Analyze error messages and logs' (SKILL.md).
- Boundary markers: The instructions lack delimiters or specific warnings to ignore instructions embedded within the processed data.
- Capability inventory: The skill allows the agent to 'Implement minimal fix' and 'Add strategic debug logging', indicating the use of file-system modification and command execution tools.
- Sanitization: There are no documented steps for the validation or sanitization of input data before it influences agent actions.
Audit Metadata