diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and process untrusted external data such as network traces, event logs, and HAR files to reproduce bugs. This creates an attack surface where malicious instructions could be embedded in these artifacts to influence the agent's behavior.
- Ingestion points: Phase 1 and Phase 4 mention processing network requests, payloads, event logs, and HAR files.
- Boundary markers: The skill lacks explicit boundary markers for external data, though it does instruct the agent to redact secrets.
- Capability inventory: The agent is authorized to execute shell scripts, curl commands, and test runners.
- Sanitization: The skill includes instructions to redact secrets with but does not provide specific sanitization for potential prompt injection in data artifacts.
Audit Metadata