lcs-debug
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data, which could contain malicious instructions meant to influence the agent's behavior.
- Ingestion points: Reads user-provided reproduction steps, logs, error messages, and recent commits (specified in the 'Chain of Truth Report' section).
- Boundary markers: Absent. The skill does not define specific delimiters or 'ignore' instructions for the data it processes.
- Capability inventory: The skill generates and executes shell commands for bug reproduction (Phase 1) and writes to the local filesystem within the
.lcs/directory. - Sanitization: Absent. There is no evidence of validation or filtering for logs or traces before they are used to build reproduction commands.
- [DYNAMIC_EXECUTION]: The '6-Phase Disciplined Debugging Loop' (Phase 1) explicitly directs the agent to generate and execute shell commands or scripts (e.g., failing tests, curl scripts) to create a deterministic reproduction of a bug, which involves executing code generated at runtime.
Audit Metadata