observe-before-editing

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists of prompt-based instructions for a debugging workflow, emphasizing verification of logs and file outputs within the tool's specific cache directories (e.g., .claude/cache/).
  • [INDIRECT_PROMPT_INJECTION]: The instructions direct the agent to read external content from log files (tail .claude/cache/*.log). This represents a potential surface for indirect prompt injection if the logs include data from untrusted sources. However, this is standard behavior for a debugging tool and no specific exploitation patterns were identified.
  • Ingestion points: Log files in .claude/cache/ (SKILL.md)
  • Boundary markers: None present
  • Capability inventory: Directory listing (ls), file reading (tail), and general file system access for code editing
  • Sanitization: None present
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 05:10 PM
Security Audit — agent-trust-hub — observe-before-editing