error-diagnostics-error-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill uses the
$ARGUMENTSvariable to incorporate user input directly into the task requirements, which could allow a user to override agent behavior with malicious instructions. - [INDIRECT_PROMPT_INJECTION]: The skill's core function is processing external diagnostic data, presenting an attack surface for indirect prompt injection. * Ingestion points: The agent reads error logs, stack traces, and reports (SKILL.md). * Boundary markers: There are no explicit delimiters or instructions to ignore commands within the data. * Capability inventory: The instructions encourage reproduction experiments and fixing code (SKILL.md), which may involve tool use or file modifications. * Sanitization: No sanitization is performed on external inputs to filter out instructional content.
Audit Metadata