container-debugging
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the use of powerful Docker CLI tools such as
docker exec,docker cp, anddocker network connect. These commands allow the agent to execute arbitrary processes inside containers, transfer files between the host and container filesystems, and modify network configurations. While these are standard debugging tools, they represent a significant capability that could be misused if the agent is compromised. - [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to ingest and analyze output from
docker_containerLogsto diagnose issues. - Ingestion points: Raw application logs retrieved from containers via the
docker_containerLogstool. - Boundary markers: The workflow lacks explicit delimiters or instructions to treat the log content as untrusted data, increasing the risk that embedded malicious instructions could influence agent behavior.
- Capability inventory: The agent has extensive capabilities including interactive shell access (
docker exec), file manipulation (docker cp), and network connectivity testing (wget,curl). - Sanitization: There is no evidence of sanitization, filtering, or validation of the log data before it is processed by the agent's logic.
Audit Metadata