code-debugging
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to perform diagnostic instrumentation by executing shell commands. Examples in SKILL.md include
security list-keychains,security find-identity,codesign, andgit init. The process also encourages creating and executing test scripts to reproduce issues. - [DATA_EXFILTRATION]: Phase 1 of the debugging process recommends logging data at component boundaries and checking environment variables (e.g.,
env | grep IDENTITY). This can lead to the exposure of sensitive secrets or tokens in logs if they are part of the environment. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) as it processes technical data from external systems.
- Ingestion points: Error messages, stack traces, and component logs processed during Phase 1 (SKILL.md).
- Boundary markers: None identified; the skill does not define delimiters for diagnostic data.
- Capability inventory: Shell command execution and generation/execution of test scripts.
- Sanitization: None identified; the instructions do not specify filtering of content from error reports.
Audit Metadata