windsurf-advanced-troubleshooting

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes several Bash scripts to perform local diagnostics on the Windsurf IDE environment. These scripts execute commands like find, wc, grep, and windsurf --list-extensions to gather information about project size, configuration file lengths, and installed extensions.
  • [COMMAND_EXECUTION]: Step 6 includes instructions for progressive resets, including commands to remove local cache and configuration directories (e.g., rm -rf ~/.codeium/windsurf/cache/). These are standard troubleshooting steps for IDE corruption and are clearly documented as destructive actions intended for manual remediation.
  • [DYNAMIC_EXECUTION]: The skill uses inline Python commands to validate the JSON structure of the MCP configuration file (mcp_config.json) and to extract server command details for debugging purposes.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The diagnostic scripts access specific configuration and metadata files within the user's home directory (e.g., ~/.windsurfrules, ~/.codeium/windsurf/mcp_config.json). This access is consistent with the skill's purpose of debugging the IDE's internal state and does not involve exfiltration of data to external domains.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:49 AM
Security Audit — agent-trust-hub — windsurf-advanced-troubleshooting