systematic-debugging
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The utility script find-polluter.sh performs automated execution of local test files using npm test based on discovered paths. While intended for isolating environment pollution, it facilitates the execution of local code.\n- [COMMAND_EXECUTION]: Instructions in SKILL.md encourage the use of diagnostic commands, including macOS system tools like security (to inspect keychains) and codesign (to verify app signatures), as part of identifying component failures.\n- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and evaluate potentially untrusted data from error messages, logs, and stack traces to identify root causes.\n
- Ingestion points: Phase 1 involves reading error messages, stack traces, and multi-component logs from files like SKILL.md and root-cause-tracing.md.\n
- Boundary markers: There are no defined boundary markers or instructions to disregard embedded commands in the analyzed logs.\n
- Capability inventory: The skill allows for shell command execution (npm, find, security, codesign) and file system access.\n
- Sanitization: Log data is processed without explicit sanitization or filtering of content.
Audit Metadata