android-network-bug-debugger
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data including network logs, API responses, and source code files. This presents a surface for indirect prompt injection, where an attacker could embed malicious instructions in log files or API responses to manipulate the agent's reasoning.
- Ingestion points: The skill explicitly requests logs (OkHttp, Chucker), API status codes, and repository code as inputs in the Inputs and Workflow sections.
- Boundary markers: The instructions lack explicit boundary markers or warnings to the agent to disregard instructions found within the ingested data.
- Capability inventory: The skill utilizes code exploration tools (codegraph) and file search commands (rg, find) to analyze the codebase based on the input data.
- Sanitization: No sanitization or validation steps are defined for the input logs or external data.
Audit Metadata