ov-debug-matcher-pass
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run various local shell commands to support the debugging process. This includes using
grepto find pass registrations and test files,cmaketo configure and build the project with debug flags (ENABLE_DEBUG_CAPS), and executing the user's own application or test binary to collect runtime data. - [DYNAMIC_EXECUTION]: The skill involves the generation and compilation of C++ source code. In Step 5, the agent is directed to add a new
TEST_Fcase to an existing test file and then compile it usingcmake --build. It also uses a Python one-liner in Step 2a to parse and summarize local log files using regular expressions. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from
matcher.log, which is output generated by the application being debugged. This log content serves as the basis for the agent's diagnosis report. While log files are an ingestion point for potentially untrusted data, the skill uses this information strictly for structured analysis within the context of developer troubleshooting.
Audit Metadata