github-actions-debugger
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, executable scripts, or remote execution triggers were identified. The skill consists entirely of documentation and instructional guidelines for manual debugging activities.
- [PROMPT_INJECTION]: The skill defines a workflow for processing untrusted log data, which represents a surface for indirect prompt injection.
- Ingestion points: External GitHub Actions logs provided by the user via file upload or copy-paste (referenced in SKILL.md).
- Boundary markers: None explicitly defined in the instructional text.
- Capability inventory: The skill performs analysis and generates text-based remediation proposals (diffs); no automated code execution or network tools are invoked by the skill logic.
- Sanitization: The skill explicitly instructs the user/agent to redact sensitive information (secrets, tokens, keys) from logs prior to ingestion.
Audit Metadata