systematic-debugging

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a standalone shell script, find-polluter.sh, which performs directory traversal using find and automatically executes npm test on files matching a user-provided pattern.
  • [DATA_EXPOSURE]: The diagnostic instructions in SKILL.md provide examples for accessing and logging system state, including macOS keychain paths and security identities using the security command-line tool, as well as checking if specific environment variables like IDENTITY are set.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze potentially untrusted data such as error messages, stack traces, and logs. Evidence Chain: (1) Ingestion points: Error messages, multi-component logs, and git diffs. (2) Boundary markers: None defined to isolate data from instructions. (3) Capability inventory: Shell execution, system command execution, and file system modification. (4) Sanitization: No sanitization of external data is specified.
  • [DYNAMIC_EXECUTION]: The systematic debugging process encourages the agent to generate and inject custom diagnostic instrumentation and logging code into the application's source files to capture data at component boundaries.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 02:08 PM