error-debugging-error-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data which could contain malicious instructions.
- Ingestion points: The
$ARGUMENTSvariable inSKILL.mdaccepts error messages, stack traces, and log files from external sources. - Boundary markers: The skill lacks explicit instructions or delimiters to isolate ingested data from the agent's control logic.
- Capability inventory: The skill encourages the agent to "implement fixes" and "narrow the issue with targeted experiments" (
SKILL.md), which may involve file system or command execution tools. - Sanitization: There are no procedures defined for sanitizing or filtering ingested error data before analysis.
- [SAFE]: The skill includes explicit safety guidelines advising the agent to redact secrets and PII from diagnostics and to avoid unauthorized production changes.
- [SAFE]: All external services and libraries referenced, such as Sentry, DataDog, and OpenTelemetry, are well-known, industry-standard tools for the stated purpose and do not represent a security risk.
Audit Metadata