systematic-debugging
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a shell script
find-polluter.shwhich executesnpm teston files discovered via a user-defined pattern. Additionally, the skill provides examples of diagnostic commands (e.g.,security list-keychains,codesign) used for debugging complex system failures. - [PROMPT_INJECTION]: The skill is designed to analyze untrusted data sources such as error messages, logs, and stack traces (Phase 1: Root Cause Investigation). This creates a surface for indirect prompt injection where instructions embedded in log output could attempt to influence the agent's analysis.
- Ingestion points: Error messages, logs, and stack traces (SKILL.md).
- Boundary markers: Absent; the instructions do not specify the use of delimiters when processing external debug data.
- Capability inventory: The skill possesses the ability to execute shell commands (
npm test, diagnostic tools) and read local files. - Sanitization: Absent; no explicit sanitization or validation of external log content is defined.
Audit Metadata