code-debugging
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from error logs and code snippets provided via inputs $0 and $1.
- Ingestion points: SKILL.md defines inputs
$0and$1which receive external error messages and code content. - Boundary markers: Absent. The instructions do not define delimiters to separate user-provided data from instructions, nor do they warn the agent to ignore instructions embedded within the code comments or error messages.
- Capability inventory: The skill's primary purpose is to guide the agent in modifying files and analyzing code execution, which involves write access and potentially execution permissions in the agent's environment.
- Sanitization: Absent. No validation or filtering logic is specified for the input strings before they are incorporated into the agent's reasoning process.
Audit Metadata