The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to use diagnostic shell commands such as env | grep IDENTITY, security list-keychains, and codesign. These commands are used to inspect the environment and system state during root cause investigation.
[INDIRECT_PROMPT_INJECTION]: The process requires the agent to analyze external and potentially untrusted data, which could contain instructions designed to influence the agent's behavior.
Ingestion points: The agent is directed to ingest error messages, stack traces, and component logs (Phase 1, Steps 1 and 4).
Boundary markers: The instructions do not specify the use of boundary markers or advice to ignore instructions embedded within these data sources.
Capability inventory: The agent has the capability to execute shell commands, create new test files, and modify existing codebases based on its analysis.
Sanitization: The skill does not provide instructions for sanitizing or validating the external log data before processing.
[DYNAMIC_EXECUTION]: Phase 1, Step 4 encourages the agent to "add diagnostic instrumentation" and "Run once to gather evidence," which involves generating and executing diagnostic code or scripts at runtime to observe component behavior.

Systematic Debugging