debug
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by processing external data from application logs and command output.
- Ingestion points: Error logs and standard error streams are piped into the
scripts/error-parser.pyscript for analysis via the instructions inSKILL.md. - Boundary markers: Absent. The skill does not define specific delimiters or instructions for the agent to ignore potential commands embedded within the logs.
- Capability inventory: The skill uses
Bash,Read, andGreptools and provides instructions for executing interactive code viapython3,node, and various database clients. - Sanitization: While the
error-parser.pyscript extracts structured data using regular expressions, it does not explicitly sanitize the content for malicious prompt injection patterns. - [COMMAND_EXECUTION]: The skill facilitates the execution of multiple diagnostic and debugging commands.
- Includes instructions and examples for executing interactive code snippets and database queries to test application state.
- Executes a local helper script (
scripts/error-parser.py) to process diagnostic data. - Uses the dynamic context injection syntax (
!) inSKILL.mdto automatically fetch recent log data usingdocker composeortailwhen the skill is loaded, which is used for diagnostic context.
Audit Metadata