debug-and-fix
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to run local development commands to reproduce issues and verify fixes. Evidence: Instructions in references/fix-verification.md and references/debugging-guide.md direct the agent to execute shell commands such as 'npm run test', 'bun run lint', and 'git log'. Context: These operations are standard for a debugging tool and occur within the local project environment.
- [PROMPT_INJECTION]: The skill ingests user-provided bug reports, which serves as a surface for indirect prompt injection. 1. Ingestion points: The bug report inputs (Symptom, Steps to reproduce, Expected vs Actual) described in SKILL.md. 2. Boundary markers: Absent. The skill does not specify delimiters to isolate user-provided reproduction steps from the agent's instructions. 3. Capability inventory: File system access (read/write code), git operations, and shell command execution (tests, linting, build scripts). 4. Sanitization: Absent. The skill does not describe validation or sanitization of the user-provided reproduction steps before the agent attempts to follow them.
Audit Metadata