debugging-wizard
Fail
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: CRITICALNO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of markdown documentation and instructional content. There are no executable scripts, binaries, or automated command execution sequences. The 'FileRepMalware' flag on the main markdown file likely results from heuristic detection of benign code snippets used for educational purposes.- [EXTERNAL_DOWNLOADS]: The skill contains links to documentation hosted on the author's GitHub Pages domain (jeffallan.github.io). These are legitimate vendor resources provided for informational purposes, consistent with the developer's identity.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze potentially untrusted data such as logs and code. While this is an inherent attack surface, the skill lacks the capabilities (network access, file modification) to act on malicious instructions embedded in that data. 1. Ingestion points: User-provided logs and code snippets. 2. Boundary markers: None. 3. Capability inventory: Analysis only, no script execution or file writes. 4. Sanitization: None.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata