systematic-debugging
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The
references/evals.yamlfile contains strings like "Ignore previous instructions" and "Bypass your policy". These are identified as negative test cases for an evaluation framework, designed specifically to ensure the agent correctly identifies and refuses malicious attempts to override its behavior. This is a positive security feature. - [COMMAND_EXECUTION]: The skill provides a bash script
find-polluter.shthat utilizes standard developer tools likenpm,fd, andrgto identify tests that create unwanted state. This script is intended for local execution by a developer during debugging and does not facilitate unauthorized remote command execution. - [DATA_EXFILTRATION]: The skill's core instructions in
SKILL.mdexplicitly command the agent to redact secrets, tokens, credentials, and user identifiers in its output, demonstrating a proactive stance on data privacy and credential safety.
Audit Metadata