helpmetest-debugger

Pass

Audited by Gen Agent Trust Hub on Mar 21, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to the way it processes external, potentially untrusted data. \n- Ingestion points: The skill takes 'Error message/logs' and 'Failing test ID' as inputs to drive its investigation (SKILL.md). \n- Boundary markers: There are no instructions or delimiters provided to the agent to treat input logs as untrusted data or to ignore instructions embedded within them. \n- Capability inventory: The skill has the ability to execute dynamic commands via 'helpmetest_run_interactive_command' and modify test files using 'helpmetest_upsert_test' (SKILL.md). \n- Sanitization: There is no evidence of sanitization, filtering, or validation of the ingested log content before it is used to influence agent actions.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 21, 2026, 11:50 PM