systematic-debugging

Pass

Audited by Gen Agent Trust Hub on Jul 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a bash script find-polluter.sh which executes npm test on files identified via the find command. It also provides educational examples for diagnostic shell commands such as security list-keychains and environment variable inspection.
  • [PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze potentially untrusted external data like error messages and stack traces, creating a surface for indirect prompt injection.
  • Ingestion points: SKILL.md (Phase 1) and root-cause-tracing.md (Step 1)
  • Boundary markers: Absent
  • Capability inventory: Subprocess execution via find-polluter.sh (npm test)
  • Sanitization: Absent
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 25, 2026, 06:23 AM
Security Audit — agent-trust-hub — systematic-debugging