diagnose
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill involves the execution of various development tools and scripts to build feedback loops for bug reproduction. Key activities include:
- Using
git bisect runfor automated bisection. - Executing network tests with
curlor HTTP scripts. - Running browser automation scripts (Playwright/Puppeteer).
- Generating and running local shell scripts based on provided templates to capture user input during debugging sessions.\n- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes untrusted external data during the diagnosis process.
- Ingestion points: The agent is instructed to read HAR files, log dumps, and core dumps (documented in Phase 1) to identify symptoms.
- Boundary markers: There are no explicit instructions to use delimiters or ignore embedded commands within the ingested data.
- Capability inventory: The skill utilizes shell execution, network access, and file system modification (across multiple phases).
- Sanitization: The instructions do not include steps to sanitize or filter the content of captured artifacts before analysis.
Audit Metadata