debug-app

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Autonomous Code Modification: The skill uses the Edit tool to perform inline code changes and injects temporary trace logs (console.log) to diagnose issues. These capabilities are intended for its primary role as a debugging assistant and are limited to the application's source directories.
  • Log Data Ingestion: The skill reads terminal output from the Metro development server using BashOutput. While this data could potentially contain untrusted information from application logs, the skill applies pattern-based classification to identify specific error states, which serves as a baseline for handling the data.
  • Dependency Management: The skill provides a recipe to install missing Node.js packages via npm install when resolution errors are detected. This process requires explicit user confirmation before any modifications to the project's dependency structure are executed.
  • Integrated Research Tools: The skill utilizes the mcp__microsoft-learn__microsoft_docs_search tool and WebFetch to research unfamiliar error messages, providing context from established technical documentation and external repositories.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 06:52 AM
Security Audit — agent-trust-hub — debug-app