diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides a logical framework for debugging and does not contain any malicious code, obfuscated content, or persistence mechanisms. The included shell script template is a standard utility for interactive troubleshooting.
- [PROMPT_INJECTION]: The skill defines a process for ingesting external data such as logs, network traces (HAR files), and core dumps, which serves as a potential surface for indirect prompt injection.
- Ingestion points: The workflow instructs the agent to read external log files, network artifacts, and error reports in Phase 1 and Phase 6.
- Boundary markers: The instructions do not specify the use of delimiters or specific instructions to disregard potentially malicious commands embedded within these external artifacts.
- Capability inventory: The skill utilizes developer-oriented tools with file system and shell execution capabilities to build reproduction environments.
- Sanitization: No explicit sanitization or filtering of the content within processed logs or traces is defined.
- [COMMAND_EXECUTION]: The workflow relies on the creation and execution of local scripts and test harnesses (e.g., test runners, curl scripts, and the provided bash template) to verify bug reproduction. These actions are standard for the development category and intended for use within the user's local development environment.
Audit Metadata