core-dumps
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous instructions for executing system commands such as
ulimit,sysctl,coredumpctl,gdb, andlldb. These are standard tools used for process resource management and post-mortem debugging. - [PRIVILEGE_ESCALATION]: Includes commands using
sudoto modify kernel parameters viasysctland install necessary utility packages likedebuginfodviaapt. These elevated permissions are required for the intended purpose of configuring system-wide core dump behavior. - [EXTERNAL_DOWNLOADS]: The skill configures the agent to fetch debug information and source code from well-known distribution servers via the
DEBUGINFOD_URLSenvironment variable (e.g.,debuginfod.ubuntu.com,debuginfod.debian.net,debuginfod.archlinux.org). These are official services provided by OS vendors for symbol resolution. - [INDIRECT_PROMPT_INJECTION]: As the skill involves analyzing core files generated during program crashes, it processes externally provided binary data. While this presents a potential attack surface if an attacker can influence the crash data, the risk is categorized as low given the standard usage of debuggers which include their own parsing protections.
- Ingestion points: Core dump files loaded into
gdborlldb(referenced in SKILL.md and references/cheatsheet.md). - Boundary markers: Not present; the skill assumes the user provides a valid core file for the crashed program.
- Capability inventory: Includes file system access (read/write), system configuration (
sysctl), package management (apt/dnf), and debugging capabilities (gdb/lldb). - Sanitization: None specified; the agent relies on the output of standard debugging tools.
Audit Metadata