error-debugging-error-analysis
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external, potentially untrusted data such as stack traces, error reports, and log files through the
$ARGUMENTSparameter. This creates a surface for indirect prompt injection where malicious instructions could be embedded in technical logs to influence the agent's diagnosis. - Ingestion points: Interpolation of
$ARGUMENTSinSKILL.mdused for incident context. - Boundary markers: The skill does not use explicit delimiters or specific 'ignore instructions' markers for the interpolated data.
- Capability inventory: The skill is capable of root-cause analysis, narrowing issues with experiments, and proposing code fixes.
- Sanitization: The instructions include a specific safety guideline to redact secrets and PII from shared diagnostics.
- [DATA_EXFILTRATION]: The implementation playbook includes templates for sending application logs and transaction traces to external observability services like Sentry and DataDog. While these are standard practices for system reliability, they involve data transmission. The skill includes explicit instructions to sanitize sensitive information (secrets and PII) before diagnostic data is shared.
Audit Metadata