diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and process external, potentially untrusted data during the debugging process.
- Ingestion points: The agent is instructed to read user-provided traces, log dumps, HAR files, and error reports in Phase 1 and Phase 2.
- Boundary markers: The instructions lack explicit delimiters or warnings to ignore instructions that might be embedded within these diagnostic artifacts.
- Capability inventory: The skill grants the agent access to shell execution, test runners, network tools (curl), and browser automation.
- Sanitization: No specific sanitization or filtering logic is prescribed for the external files being analyzed.
- [COMMAND_EXECUTION]: The skill requires the agent to generate, modify, and execute local shell scripts using scripts/hitl-loop.template.sh to facilitate interactive debugging sessions.
Audit Metadata