systematic-debugging
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a shell script
find-polluter.shdesigned to automate the identification of tests that create unwanted state (pollution) by iteratively runningnpm teston files matching a provided pattern. This is a standard utility for debugging flaky test suites. - [COMMAND_EXECUTION]: The
SKILL.mdfile contains instructions and examples for diagnostic instrumentation in multi-layer systems. This includes shell commands likeenv | grepto verify environment variable propagation and macOSsecuritytools to inspect keychain identities during codesigning failures. - [INDIRECT_PROMPT_INJECTION]: The debugging process involves the agent ingesting and analyzing external data such as error logs, stack traces, and system outputs which could theoretically contain malicious instructions.
- Ingestion points: Phase 1 of the debugging process in
SKILL.md, where the agent is instructed to read error messages and gather evidence from multi-component systems. - Boundary markers: Absent; the skill does not define specific delimiters for separating logs or error messages from the instruction context.
- Capability inventory: The agent has the ability to execute shell commands (as shown in the
find-polluter.shscript and instrumentation examples) and read project files. - Sanitization: Absent; the instructions focus on direct analysis of the raw error data for root cause identification.
Audit Metadata