systematic-debugging
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill guides the agent to use several command-line tools for investigating codebase state and running tests. This includes Git operations (git log, git diff, git bisect), test execution (npm test), and system utilities (grep). These commands are standard for development workflows and align with the skill's stated purpose.\n- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it instructs the agent to ingest and analyze potentially untrusted external data like error messages, stack traces, and application logs.\n
- Ingestion points: Untrusted data enters the agent's context through error messages and logs during the investigation phase described in SKILL.md and references/debugging-checklist.md.\n
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when processing this external data.\n
- Capability inventory: Across all files, the skill permits the use of shell commands for version control, testing, and file searching.\n
- Sanitization: There is no mention of sanitizing or validating the content of logs or error messages before the agent processes them.
Audit Metadata