root-cause-tracing
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a utility script
find-polluter.shdesigned to identify specific tests that create unwanted state. It uses standard shell commands likefindto locate test files andnpm testto execute them individually. This is normal functionality for a debugging tool.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze error logs, stack traces, and test outputs to identify root causes. This creates a processing surface for external data generated during software execution.\n - Ingestion points: Interpretation of stack traces and log outputs as described in the tracing process in
SKILL.md.\n - Boundary markers: The instructions suggest using specific instrumentation markers (e.g.,
DEBUG git init) to help filter and identify relevant log entries.\n - Capability inventory: The skill includes a shell script capable of executing tests via the local
npmCLI.\n - Sanitization: None; the skill relies on the user or agent to interpret standard log outputs generated by the project's own test suite.
Audit Metadata