systematic-debugging

Pass

Audited by Gen Agent Trust Hub on Apr 8, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a bash utility script, find-polluter.sh, which automates the process of identifying tests that cause state pollution. The script uses standard commands like find, sort, and npm test to isolate failing tests. This is a legitimate developer tool.
  • [COMMAND_EXECUTION]: The SKILL.md file provides diagnostic examples for debugging multi-component systems, including commands to inspect environment variables (env | grep) and macOS keychain state (security list-keychains). These are framed as educational examples for troubleshooting build and code-signing environments.
  • [SAFE]: The skill encourages security-conscious debugging practices, such as verifying whether environment secrets are set without printing their actual values (e.g., using ${IDENTITY:+SET}).
  • [SAFE]: The 'Pressure Test' files (test-pressure-1.md through test-pressure-3.md) are instructional scenarios designed to evaluate or train the agent's adherence to a systematic process under simulated stress. They do not contain prompt injection or safety bypass attempts.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 8, 2026, 02:29 PM
Security Audit — agent-trust-hub — systematic-debugging