debug-mode
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill launches a local Python-based HTTP server via
scripts/debug-server.pyto collect structured logging events during the debugging process. - [PROMPT_INJECTION]: Potential for indirect prompt injection through the analysis of collected log data.
- Ingestion points: The
POST /logendpoint inscripts/debug-server.pyaccepts JSON payloads from the application being debugged, which are then stored in a local file (e.g.,/tmp/debug-events.jsonl). - Boundary markers: No specific delimiters or 'ignore embedded instructions' warnings are defined for the agent when it reads and analyzes the collected log evidence.
- Capability inventory: The agent is authorized to perform code instrumentation (modifying source files) and read local log files to verify debugging hypotheses.
- Sanitization: The HTTP server writes raw JSON payloads to the output file without validation or sanitization, which the agent then processes as part of its analysis phase.
Audit Metadata