systematic-debugging
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and act upon untrusted data from error messages, stack traces, and build failures. \n
- Ingestion points: Error logs and stack traces are read in
SKILL.md(Phase 1). \n - Boundary markers: No explicit delimiters or instructions to ignore embedded commands in the processed data are provided. \n
- Capability inventory: The skill utilizes
write_to_file,run_command, andreplace_file_contentinSKILL.md(Phases 1 and 3) to act on findings. \n - Sanitization: No sanitization of the input error data is performed before processing. \n- [DYNAMIC_EXECUTION]: The skill workflow involves generating and executing new code at runtime for debugging purposes. \n
- Evidence: Phase 1 of
SKILL.mdinstructs the agent to write reproduction scripts (e.g.,repro.pyor.jsin/tmp/) and execute them viarun_command. \n- [COMMAND_EXECUTION]: The skill utilizes shell commands to gather environment data and execute reproduction tests. \n - Evidence: Instructions in
SKILL.md(Phase 1) andreferences/tracing.md(Environment Boundary) describe usingrun_commandand shell scripts to inspect environment variables and process state.
Audit Metadata