diagnose
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from multiple sources, which could contain malicious instructions aimed at influencing the agent's behavior.
- Ingestion points: The skill captures user-provided error messages through the
scripts/hitl-loop.template.shscript and suggests analyzing DOM, console, and network data via headless browsers (Playwright/Puppeteer). - Boundary markers: There are no specific instructions or delimiters defined to isolate external data from the agent's core instructions.
- Capability inventory: The skill utilizes powerful capabilities including arbitrary CLI invocation, HTTP requests (curl), and headless browser automation.
- Sanitization: No sanitization or validation logic is present for the data retrieved from external logs or web pages.
Audit Metadata