vp-minimal-repro
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions explicitly require the agent to verify the reproduction by executing it locally: "Run it and watch it fail; a reproduction that has only been reasoned about is a guess." (SKILL.md).
- [DYNAMIC_EXECUTION]: The agent is tasked with creating and running reproduction artifacts, which may involve generating and executing shell scripts, Python, or Node.js code derived from observed failure mechanisms (references/working-repro.md).
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data such as failure reports, logs, stack traces, and configuration excerpts to build the reproduction. This creates a surface where malicious instructions hidden in the logs could be followed by the agent during the reproduction process.
- Ingestion points: User-provided failure descriptions, logs, stack traces, and source code analyzed in SKILL.md and references/de-identification.md.
- Boundary markers: The skill does not explicitly instruct the agent to use boundary markers for inputs, but it does emphasize separating observation from inference.
- Capability inventory: The skill leverages the agent's ability to write files and execute shell commands to verify the software failures.
- Sanitization: The skill contains high-quality instructions for de-identifying data (references/de-identification.md) to prevent data exposure, including scrubbing absolute paths, internal names, and environment variables, though it does not specifically address instruction injection sanitization.
Audit Metadata