debugging-and-error-recovery
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a process for the agent to ingest and analyze data from external logs, bug reports, and console outputs, which represents an indirect prompt injection attack surface.
- Ingestion points: User-provided error messages, console logs, system logs (Step 1), and automated CI environment output.
- Boundary markers: The skill contains a specific section titled "Treating Error Output as Untrusted Data" that explicitly instructs the agent to treat diagnostic output as data rather than instructions.
- Capability inventory: The skill workflow involves executing developer tools including npm (test, run, build) and git (bisect).
- Sanitization: The skill relies on natural language instructions and agent-side logic to recognize and ignore malicious instructions embedded in log data.
Audit Metadata