diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill methodology instructs the agent to create, modify, and execute local shell scripts based on the provided hitl-loop.template.sh to verify bug reproduction.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes untrusted external data such as system logs, HAR files, and core dumps, which serves as an ingestion surface for potential prompt injection attacks. * Ingestion points: Diagnostic artifacts and user-provided error messages are processed in Phase 1 and Phase 2. * Boundary markers: The skill lacks instructions for using delimiters to isolate untrusted data from the agent's operating context. * Capability inventory: The agent is authorized to execute shell commands, perform network requests via curl, and interact with the local filesystem. * Sanitization: Although the skill mandates secret redaction, it does not specify methods for sanitizing data to prevent the agent from obeying instructions embedded within the diagnostic data.
Audit Metadata