systematic-debugging
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill incorporates security-conscious instructions, specifically directing the agent to redact secrets from all command outputs, logs, and screenshots, and advising that credentials be maintained within environment variables rather than being hardcoded or exposed in terminal history.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves ingesting and analyzing untrusted external data such as stack traces and log files, which creates a potential surface for indirect prompt injection. Given the skill's purpose as a debugging tool, this risk is considered a baseline factor.
- Ingestion points: Error logs, stack traces, and reproduction symptoms are processed throughout the debugging loop described in SKILL.md.
- Boundary markers: No explicit data delimiters or boundary markers for external data are specified in the instructions.
- Capability inventory: The skill performs high-capability actions including shell command execution and file system modifications (Steps 1, 4, and 5).
- Sanitization: There are no explicit instructions for sanitizing or escaping the content of ingested external logs before processing.
Audit Metadata