diagnostic-runner
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local shell script
{baseDir}/diagnose.shto run comprehensive system health checks. This is the primary mechanism for the diagnostic functionality and is consistent with the skill's description. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface through the ingestion of external system data.
- Ingestion points: The
configandenvironmentcategories involve reading local configuration files and environment variables. - Boundary markers: There are no delimiters or protective instructions provided to prevent the agent from interpreting data within those files as new instructions.
- Capability inventory: The skill can execute shell scripts and access system-wide metadata and network status.
- Sanitization: No sanitization or validation of the external configuration data is mentioned or documented.
Audit Metadata