diagnose
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to build feedback loops using shell commands, automated scripts (Bash, Node.js, Python), and developer tools like curl and git bisect. This is standard behavior for a software diagnosis tool.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface (Category 8) as it requires the agent to analyze potentially untrusted external artifacts such as HAR files, error logs, and crash dumps.
- Ingestion points: External artifacts like HAR files, log dumps, and user-provided failure descriptions (Phase 1, Phase 6 in SKILL.md).
- Boundary markers: Absent; the instructions do not specify any delimiters or warnings to ignore instructions that might be embedded in the diagnostic data.
- Capability inventory: The agent has capabilities to execute shell commands, perform network requests, and modify the file system across multiple scripts (Phase 1, Phase 4).
- Sanitization: Absent; no validation or sanitization of the external diagnostic data is requested before processing.
Audit Metadata