troubleshoot-service
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external diagnostic data including application logs, distributed traces (Jaeger, Tempo, Datadog), and Kubernetes event metadata.
- Ingestion points: Processes data from external logging and APM platforms as described in
SKILL.mdandreferences/common-failure-areas.md. - Boundary markers: The instructions do not define specific technical delimiters for data ingestion but provide clear behavioral instructions to cross-check AI-summarized logs against raw evidence.
- Capability inventory: The skill is authorized to use
execute_command,write_file,edit_file, andcreate_filefor diagnostic and remediation purposes. - Sanitization: The skill includes an explicit "RCE Guard" (ASI05) that instructs the agent never to construct commands or fix scripts using external content without strict schema validation.
- [COMMAND_EXECUTION]: The skill utilizes the
execute_commandtool to perform troubleshooting tasks. Security risks are addressed via explicit instructions in the "Security Guardrails" section ofSKILL.mdandreferences/failure-modes-and-security.md, which mandate that diagnostic commands must not be derived from untrusted external data.
Audit Metadata