bug-hunt-swarm
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The agent processes potentially untrusted external data which could contain malicious instructions.\n
- Ingestion points: Reads user descriptions, logs, stack traces, and git history (SKILL.md).\n
- Boundary markers: Missing explicit delimiters or instructions to ignore embedded commands in the processed data.\n
- Capability inventory: Utilizes
rgandgitfor repository analysis.\n - Sanitization: No evidence of input validation or sanitization for the collected bug evidence.\n- [COMMAND_EXECUTION]: Use of repository analysis tools.\n
- Evidence: The skill instructs the agent to use
rg,git diff,git log, andgit showto gather evidence (SKILL.md). These are used in a read-only context as per the skill's instructions.
Audit Metadata