ci-debug-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill suggests running
env | sortinreferences/ci-patterns.mdto debug CI environments. This command lists all environment variables, which frequently include sensitive secrets like API keys, authentication tokens, and private configuration. Returning this information to the agent's context creates a significant data exposure risk. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from bug reports and CI logs to identify reproduction steps and automate fixes.
- Ingestion points: The skill reads GitHub issues and external log files as described in
references/bug-thread-extraction.md. - Boundary markers: There are no explicit instructions or delimiters to prevent the agent from following malicious instructions potentially embedded in the logs or issue descriptions.
- Capability inventory: The skill has the ability to execute powerful shell commands including
npm,docker,git, andghacross its various reference files. - Sanitization: The workflow lacks any sanitization or verification steps for external content before it is processed and acted upon by the agent.
Audit Metadata