debugging-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external, potentially untrusted data to perform its primary function of debugging.
- Ingestion points: The workflow reads logs, stack traces, test outputs, screenshots, and various project documentation files (SKILL.md, references/debugging-playbook.md).
- Boundary markers: There are no explicit delimiters or specific instructions to ignore embedded commands within the analyzed logs or documentation.
- Capability inventory: The skill utilizes capabilities for file writing (to fix code), shell command execution (to run reproduction tests), and UI interaction (to capture screenshots).
- Sanitization: While there is no instruction-level sanitization, the
references/debugging-playbook.mdfile contains a strong security directive to never log secrets, tokens, or sensitive personal data, reducing the risk of accidental data exposure.
Audit Metadata