debug-reproduced
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes local JavaScript files (
analyze-logs.mjsandclear-logs.mjs) to manage and analyze log data stored in a project's.debugdirectory. The analysis script safely parses log entries as JSON and provides formatted summaries without executing log content or performing network operations. - [PROMPT_INJECTION]: The skill includes an ingestion surface for indirect prompt injection via the
$ARGUMENTSplaceholder and by reading raw application logs into the agent's context. This is a standard requirement for the skill's debugging functionality. - Ingestion points:
SKILL.md($ARGUMENTS) and.debug/debug.log(viaanalyze-logs.mjs). - Boundary markers: The
analyze-logs.mjsscript acts as a parser, which implicitly delimits log fields, but no explicit prompt-level delimiters are used for the user notes. - Capability inventory: The skill can read local files and execute specific maintenance scripts included in the package.
- Sanitization:
analyze-logs.mjsusesJSON.parsewithin a try-catch block to handle log entries, effectively filtering out non-JSON content.
Audit Metadata