observe-before-editing
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of prompt-based instructions for a debugging workflow, emphasizing verification of logs and file outputs within the tool's specific cache directories (e.g.,
.claude/cache/). - [INDIRECT_PROMPT_INJECTION]: The instructions direct the agent to read external content from log files (
tail .claude/cache/*.log). This represents a potential surface for indirect prompt injection if the logs include data from untrusted sources. However, this is standard behavior for a debugging tool and no specific exploitation patterns were identified. - Ingestion points: Log files in
.claude/cache/(SKILL.md) - Boundary markers: None present
- Capability inventory: Directory listing (
ls), file reading (tail), and general file system access for code editing - Sanitization: None present
Audit Metadata