fix-diagnostics-without-suppressing
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process diagnostic output from a wide range of external tools including compilers (GCC, Clang, tsc, kotlinc), linters (ESLint, Ruff, Clippy), and specialized reverse-engineering tools (Ghidra).
- Ingestion Points: In the
Workflowsection ofSKILL.md, the agent is instructed to "run the exact command that reported the diagnostic... and save its output to a file," which is then read and categorized by the agent. - Boundary Markers: There are no instructions for using specific delimiters or "ignore embedded instructions" warnings when the agent reads the captured diagnostic output.
- Capability Inventory: The skill assumes the agent has the capability to execute shell commands (for reproduction), read local files (diagnostics and source code), and perform file writes to apply fixes (documented in
SKILL.md). - Sanitization: No sanitization or filtering of the diagnostic content is described, allowing potentially malicious strings embedded in error messages to be processed directly by the agent.
Audit Metadata