debugging-and-error-recovery
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill defines a workflow involving the execution of local development commands for troubleshooting and verification.
- Evidence: Commands such as
npm test,npm run build,npm run dev, andgit bisectare recommended inSKILL.md. - Context: These tools are used within the local project environment to reproduce bugs and verify that fixes do not introduce regressions.
- [PROMPT_INJECTION]: The skill identifies the attack surface for indirect prompt injection and provides explicit mitigation guidelines.
- Ingestion points: Error messages, stack traces, log output, and exception details from CI logs or third-party APIs.
- Boundary markers: Includes a dedicated security section titled 'Treating Error Output as Untrusted Data'.
- Capability inventory: Access to shell commands via
npmandgitas part of the debugging process. - Sanitization: Directs the agent to treat error text as data for analysis rather than instructions, requiring user confirmation before executing any commands suggested within error outputs.
Audit Metadata