systematic-debugging
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The documentation includes shell commands for inspecting system keychains and environment variables, which are common diagnostic steps for debugging build and signing failures. Additionally, the 'find-polluter.sh' script automates test execution via 'npm test' to isolate environment pollution. These commands are consistent with the skill's technical debugging purpose.\n- [INDIRECT_PROMPT_INJECTION]: The skill's methodology involves deep analysis of untrusted inputs such as error logs and stack traces. This presents an indirect prompt injection surface where instructions could be hidden in debug data.\n
- Ingestion points: Error messages, logs, and recent changes processed during Phase 1 (Root Cause Investigation) and the Tracing Process.\n
- Boundary markers: The instructions do not prescribe specific delimiters for processing these external inputs.\n
- Capability inventory: The skill leverages tool execution (shell) and file reading to gather diagnostic evidence.\n
- Sanitization: The methodology does not include steps to sanitize or filter potentially malicious content from external error logs.
Audit Metadata