dev-debugging
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides detailed instructions for executing local development and production environment commands. These include running development servers (npm run dev), building binaries (cargo tauri build), and managing system services (systemctl, kbuildsycoca6). These operations are consistent with the skill's primary purpose as a technical debugging assistant.
- [COMMAND_EXECUTION]: Includes troubleshooting steps for production and CDN issues, involving network diagnostics (curl, dig, openssl) and server administration (ssh, Caddy configuration). These target well-known services like Cloudflare and established server software.
- [COMMAND_EXECUTION]: Provides instructions for Linux desktop environment maintenance, such as manual icon installation and cache clearing using sudo and system management tools. These are legitimate administrative tasks for resolving the specific issues described.
- [DATA_EXFILTRATION]: Uses placeholder values (e.g., YOUR_TOKEN, ZONE_ID) for API interactions with Cloudflare. No hardcoded credentials or sensitive data access patterns were detected.
- [PROMPT_INJECTION]: The skill defines a structured workflow for processing user-provided code (JavaScript, HTML, CSS) to diagnose frontend bugs. While this represents a surface for indirect prompt injection, it is the fundamental capability of the tool and is handled within the context of developer-led debugging. Ingestion points: User-provided code blocks in the frontend-layout-fixer template. Boundary markers: Markdown code blocks. Capability inventory: Shell command execution via various dev tools. Sanitization: None.
Audit Metadata