crash-triage-reference
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides example shell commands for stack-trace deduplication and crash minimization. These include using standard utilities like
grep,sha1sum, andhead, as well as executing the local fuzz target binary withlibFuzzerflags such as-minimize_crash=1. These operations are consistent with the skill's primary purpose of fuzzer artifact triage. - [EXTERNAL_DOWNLOADS]: The documentation includes links to official LLVM and Clang technical documentation (clang.llvm.org and llvm.org) for AddressSanitizer (ASan), UndefinedBehaviorSanitizer (UBSan), and MemorySanitizer (MSan). These references point to well-known, trusted technical resources.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface because it is designed to ingest and process untrusted data in the form of fuzzer crash reports.
- Ingestion points: Crash report text files (e.g.,
/tmp/report.txt) and crash artifacts. - Boundary markers: None identified in the instructional text.
- Capability inventory: The skill encourages the use of shell commands for hashing (
sha1sum) and running local binaries (./fuzz_target). - Sanitization: None described; the skill assumes the user/agent is manually parsing the provided reports.
Audit Metadata