core-dumps

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous instructions for executing system commands such as ulimit, sysctl, coredumpctl, gdb, and lldb. These are standard tools used for process resource management and post-mortem debugging.
  • [PRIVILEGE_ESCALATION]: Includes commands using sudo to modify kernel parameters via sysctl and install necessary utility packages like debuginfod via apt. These elevated permissions are required for the intended purpose of configuring system-wide core dump behavior.
  • [EXTERNAL_DOWNLOADS]: The skill configures the agent to fetch debug information and source code from well-known distribution servers via the DEBUGINFOD_URLS environment variable (e.g., debuginfod.ubuntu.com, debuginfod.debian.net, debuginfod.archlinux.org). These are official services provided by OS vendors for symbol resolution.
  • [INDIRECT_PROMPT_INJECTION]: As the skill involves analyzing core files generated during program crashes, it processes externally provided binary data. While this presents a potential attack surface if an attacker can influence the crash data, the risk is categorized as low given the standard usage of debuggers which include their own parsing protections.
  • Ingestion points: Core dump files loaded into gdb or lldb (referenced in SKILL.md and references/cheatsheet.md).
  • Boundary markers: Not present; the skill assumes the user provides a valid core file for the crashed program.
  • Capability inventory: Includes file system access (read/write), system configuration (sysctl), package management (apt/dnf), and debugging capabilities (gdb/lldb).
  • Sanitization: None specified; the agent relies on the output of standard debugging tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 01:51 AM