regression-root-cause-analyzer
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
gitfor repository analysis (history, diffs, and bisecting) andpytestfor executing tests. These commands are essential for the workflow and are used in a standard, expected manner for debugging. - [PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection as it is designed to analyze external data such as stack traces and git logs.
- Ingestion points: The skill reads git diffs, error messages, and test output from the codebase.
- Boundary markers: No explicit instructions are provided to separate or sanitize ingested data from the agent's instructions.
- Capability inventory: Filesystem access via
git, code execution viapytest, and dependency management viapip. - Sanitization: There are no documented mechanisms for sanitizing or validating the untrusted content before analysis.
Audit Metadata