systematic-debugging
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a utility script
find-polluter.shthat automates runningnpm teston multiple files to identify state-polluting tests. It also provides examples of using local tools likesecurityandcodesignfor diagnosing build and signing issues.\n- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve processing potentially untrusted data such as log files and error messages.\n - Ingestion points: The skill analyzes captured test logs (e.g.,
/tmp/debug-run.log) and error messages from the environment as described inroot-cause-tracing.md.\n - Boundary markers: The skill explicitly mandates the redaction of secrets in any displayed or sent output in
SKILL.md.\n - Capability inventory: The skill has the capability to execute shell commands and test suites for verification as seen in
find-polluter.shandSKILL.md.\n - Sanitization: There is a core rule to redact secrets with
<REDACTED>and ensure credentials remain in the environment rather than in outputs.
Audit Metadata