diagnose
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill incorporates security best practices by explicitly instructing the agent to 'avoid outputting credentials' (Step 1) when capturing environment data and logs.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from logs, user-provided inputs, and environment state (SKILL.md, Step 1). This creates a vulnerability surface where malicious instructions could be embedded in log files or error outputs. Mandatory Evidence Chain:
- Ingestion points: Reads logs, command outputs, and environment variables (SKILL.md).
- Boundary markers: The skill does not define specific delimiters for separating log content from instructions, though it warns against credential exposure.
- Capability inventory: Limited to minimal authorized repairs and file system writes (SKILL.md, Step 5).
- Sanitization: No specific sanitization or escaping of log content is mentioned before processing.
Audit Metadata