systematic-debugging
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides the
find-polluter.shscript to automate the execution ofnpm testduring diagnostics. This is a legitimate development tool within the scope of a debugging skill. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and act upon potentially untrusted error messages and code snippets.
- Ingestion points: Processes stack traces, error logs, and repository files in the isolation phase of
SKILL.md. - Boundary markers: Utilizes diagnostic altitudes (L1-L7) for logical separation, but lacks explicit security delimiters for ingested data.
- Capability inventory: Authorization to edit code ('Repair and close') and execute tests via
npminfind-polluter.shand the<aegis-workspace-helper>tool. - Sanitization: No explicit sanitization or escaping of external content is documented before processing.
Audit Metadata