purchasely-debug
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns detected. The skill follows best practices for a development and debugging tool, focusing on diagnosing integration issues via logs and codebase inspection.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data such as error logs and user-provided issue descriptions to diagnose problems. While this is necessary for its function as a debugger, it represents a standard attack surface where malicious instructions could be embedded in logs to influence the agent's analysis or file-editing behavior.
- Ingestion points: User issue descriptions and SDK log streams (Step 1).
- Boundary markers: None explicitly used for processing log data.
- Capability inventory: File system searches (
rg,ast-grep,fd), file modification (proposing code fixes), and local build execution. - Sanitization: No explicit sanitization or validation of log content is described.
Audit Metadata