error-diagnostics-error-analysis
Fail
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: HIGHPROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection (HIGH): The skill is designed to ingest and analyze external data sources via the $ARGUMENTS variable, which presents a significant attack surface.
- Ingestion points: Specified in the Requirements section where the agent is told to 'Analyze and resolve errors in: $ARGUMENTS' using log files and stack traces.
- Boundary markers: Absent; the skill lacks any instructions to treat the ingested data as non-executable or to use delimiters to separate data from instructions.
- Capability inventory: The skill is authorized to 'implement fixes' and 'resolve errors', which implies file system modifications or command execution based on the analysis of untrusted data.
- Sanitization: Absent; there is no requirement to validate or filter the input arguments for malicious content before processing.
Recommendations
- AI detected serious security threats
Audit Metadata