logic-locate
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data such as stack traces, error messages, and reproduction paths provided by a user or external system.
- Ingestion points: User-provided failure data is identified as the primary input in
SKILL.md(Step 0) and further characterized inlogic-locate-guide.md(Step 1). - Boundary markers: The skill lacks explicit boundary markers or instructions to treat embedded strings within stack traces as data rather than instructions, which could lead to accidental obedience if an attacker embeds instructions in an error message.
- Capability inventory: The skill is capable of performing deep code analysis and generating a "Remedy" (Step 7) which involves proposing specific code changes based on the processed inputs.
- Sanitization: There is no evidence of input validation or sanitization mechanisms to filter malicious instruction patterns from the provided logs or traces.
Audit Metadata