diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external diagnostic data like logs and stack traces which are potential vectors for indirect prompt injection. 1. Ingestion points: reads errors, stacks, logs, and traces (SKILL.md). 2. Boundary markers: instructions to separate observations from inferences (SKILL.md). 3. Capability inventory: references shell commands, debuggers, and instrumentation. 4. Sanitization: explicitly mandates excluding credentials and private data and sanitizing evidence (SKILL.md).
- [SAFE]: The skill follows security best practices by requiring the removal of temporary artifacts and restoration of system state after investigation.
Audit Metadata