debug
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze potentially untrusted data from multiple sources, which could lead to indirect prompt injection if those sources contain malicious instructions.
- Ingestion points: The workflow in
SKILL.mdinvolves reading user issue descriptions and inspecting local evidence such as trace tools, state tools, and project memory (notepad). - Boundary markers: There are no explicit instructions or delimiters defined to isolate or ignore potentially malicious instructions embedded within the ingested data.
- Capability inventory: The skill utilizes diagnostic tools and project memory, which may involve reading files and observing session states.
- Sanitization: No sanitization or validation steps are mentioned for the external data being processed.
Audit Metadata