diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to build and run feedback loops using shell commands such as
curl,git bisect run, and headless browser scripts. - [COMMAND_EXECUTION]: The skill includes a bash script template (
scripts/hitl-loop.template.sh) that the agent is instructed to modify and execute. This involves dynamic generation and execution of shell scripts on the host system to facilitate user interaction. - [PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from the user's environment to diagnose bugs, creating an indirect prompt injection surface.
- Ingestion points: The agent is instructed to read HTTP response bodies, network traces, console logs, and error messages (Phase 1 and Phase 4).
- Boundary markers: There are no explicit instructions or delimiters provided to prevent the agent from obeying instructions that might be embedded within the data or logs being analyzed.
- Capability inventory: The agent has broad shell execution capabilities and network access (via
curl) which could be exploited if malicious content in a log file influences the agent's behavior. - Sanitization: The skill includes a 'Redact' section that mandates the manual removal of secrets and credentials from output, which provides a layer of data exposure protection.
Audit Metadata