debugkit
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill extensively uses the
Bashtool to perform technical tasks such as creating reproduction scripts, runninggit bisectin detached worktrees, and executing diagnostic probes. - [EXTERNAL_DOWNLOADS]: The skill leverages
WebSearchandWebFetchto assist in decoding opaque error strings, status codes, and library stack frames from external sources. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data (such as bug reports, error logs, and web documentation) and possesses tools capable of affecting the local environment.
- Ingestion points: User-provided symptoms, repository source code, and fetched web content (SKILL.md).
- Boundary markers: The skill defines a strict behavioral "ritual" to gate execution, but it lacks technical delimiters or instructions to ignore embedded commands in the data it processes.
- Capability inventory: The skill has access to
Bashfor shell commands,WriteandEditfor file system modification, andWebFetchfor network requests (SKILL.md). - Sanitization: There is no evidence of sanitization or filtering for external data before it is interpreted or used in command generation.
Audit Metadata