debugging
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a standard, experiment-based debugging loop (reproduce, isolate, verify) without any malicious instructions or obfuscation.
- [SAFE]: External links in SKILL.md are restricted to official documentation from trusted organizations, including Microsoft (VS Code, Playwright, GitHub), Google, and the Git project.
- [SAFE]: The skill operates within its intended functional scope, using standard development tools for reproduction and verification tasks.
- [PROMPT_INJECTION]: The skill processes user-supplied failure reports to generate reproduction scripts in a shell environment. This represents a standard indirect prompt injection surface inherent to debugging tasks, but no specific exploitable patterns were observed.
- Ingestion points: failure definitions and inputs provided by users in SKILL.md.
- Boundary markers: The skill uses a structured 'Debugging Brief' to organize output.
- Capability inventory: Access to Bash, Write, Read, Grep, and Glob tools.
- Sanitization: None explicitly defined in the workflow instructions.
Audit Metadata