systematic-debugging
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill incorporates a utility script (
find-polluter.sh) and various shell command examples inSKILL.mdto help identify the source of test failures and verify environment configurations. These tools use standard commands such asnpm test,find,env, and macOSsecurityutilities for diagnostic purposes. - [INDIRECT_PROMPT_INJECTION]: The debugging workflow requires the agent to ingest and analyze external data like error logs, stack traces, and test outputs, which could serve as a vector for indirect prompt injection.
- Ingestion points: Phase 1 of the debugging process in
SKILL.mdand the tracing instructions inroot-cause-tracing.mddirect the agent to examine error output and logs. - Boundary markers: The skill lacks explicit instructions to treat error messages as untrusted data or to use specific delimiters when processing them.
- Capability inventory: The skill allows for command execution and file system access to facilitate the debugging process.
- Sanitization: The instructions do not specify a requirement for sanitizing or escaping the technical data processed during investigation.
Audit Metadata