systematic-debugging
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a utility script
find-polluter.shthat executes local tests usingnpm test. Additionally,SKILL.mdprovides examples of diagnostic shell commands such assecurity list-keychainsandcodesignto verify build environment states. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data such as error logs, stack traces, and test results. While this represents a potential surface for indirect prompt injection, it is the intended primary purpose of a debugging skill and lacks exploitable privilege paths in this context.
- Ingestion points: Error messages, stack traces, and test output processed in
SKILL.mdandroot-cause-tracing.md. - Boundary markers: None explicitly defined for logs.
- Capability inventory: Local file reading and execution of local test suites via
npm. - Sanitization: None specified for log analysis.
- [SAFE]: No malicious patterns, unauthorized persistence mechanisms, or data exfiltration attempts were identified. All included scripts and documentation focus on standard developer troubleshooting workflows.
Audit Metadata