debug-app
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Autonomous Code Modification: The skill uses the Edit tool to perform inline code changes and injects temporary trace logs (console.log) to diagnose issues. These capabilities are intended for its primary role as a debugging assistant and are limited to the application's source directories.
- Log Data Ingestion: The skill reads terminal output from the Metro development server using BashOutput. While this data could potentially contain untrusted information from application logs, the skill applies pattern-based classification to identify specific error states, which serves as a baseline for handling the data.
- Dependency Management: The skill provides a recipe to install missing Node.js packages via npm install when resolution errors are detected. This process requires explicit user confirmation before any modifications to the project's dependency structure are executed.
- Integrated Research Tools: The skill utilizes the mcp__microsoft-learn__microsoft_docs_search tool and WebFetch to research unfamiliar error messages, providing context from established technical documentation and external repositories.
Audit Metadata