python-debugpy
Fail
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill provides instructions to execute
echo 0 | sudo tee /proc/sys/kernel/yama/ptrace_scopewhich uses elevated privileges to disable a kernel-level security control designed to restrict process tracing. This lowers the security posture of the host system to enable debugger attachment. - [DYNAMIC_EXECUTION]: The skill facilitates arbitrary code execution at runtime by teaching the use of
pdbanddebugpyREPLs. It highlights theinteractcommand and the!stmtsyntax, which allow for the execution of arbitrary Python code, library imports, and state mutation within an active process. - [INDIRECT_PROMPT_INJECTION]: The skill identifies ingestion points for external data in components like
tui_gatewayand_SlashWorkerand provides instructions to insert debugger traces into these paths without adequate sanitization or boundary markers. 1. Ingestion points: RPC handlers intui_gatewayand theexecpath in_SlashWorker. 2. Boundary markers: Absent; instructions do not advise on delimiters or safety warnings for data processed during debug sessions. 3. Capability inventory: The debugger provides a REPL with full process context, enabling file system access, network operations (viasocketandjson), and subprocess management. 4. Sanitization: Absent; the skill focuses on providing direct execution access for debugging. - [EXTERNAL_DOWNLOADS]: The skill instructs the installation of third-party Python packages
debugpyandremote-pdbviapip install. These are used as foundational components for the remote debugging workflows described in the documentation. - [COMMAND_EXECUTION]: The skill provides various shell commands for environment setup, process monitoring, and network interaction, including
ncfor port communication andpython -m pdbfor starting scripts in a controlled execution environment.
Recommendations
- AI detected serious security threats
Audit Metadata