systematic-debugging
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a bash script
find-polluter.shwhich executesnpm teston files identified via thefindcommand. It also provides educational examples for diagnostic shell commands such assecurity list-keychainsand environment variable inspection. - [PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze potentially untrusted external data like error messages and stack traces, creating a surface for indirect prompt injection.
- Ingestion points:
SKILL.md(Phase 1) androot-cause-tracing.md(Step 1) - Boundary markers: Absent
- Capability inventory: Subprocess execution via
find-polluter.sh(npm test) - Sanitization: Absent
Audit Metadata