debug-mantra
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external, untrusted data such as bug reports, stack traces, and error logs.\n
- Ingestion points: User-provided error logs, stack traces, and environment artifacts (HAR, log dumps, core files) mentioned in the reproduction and fail path steps in SKILL.md.\n
- Boundary markers: The instructions lack specific delimiters or 'ignore instructions' warnings to prevent the agent from obeying malicious commands embedded within the provided debugging data.\n
- Capability inventory: The skill instructs the agent to use powerful capabilities including debuggers, shell execution for reproduction scripts (curl, CLI), and in-code instrumentation (file-writes/logging) across all its steps.\n
- Sanitization: No sanitization, validation, or escaping of the ingested external content is defined in the workflow.
Audit Metadata