cc-debugging
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data such as logs, stack traces, and test outputs to guide the debugging process.
- Ingestion points: The skill processes external data during the 'Hypothesize' (Step 3) and 'Experiment' (Step 4) phases described in
SKILL.md. - Boundary markers: There are no specific delimiters or instructions for the agent to disregard potential prompts embedded within the debug data.
- Capability inventory: The skill utilizes file editing (
Edit) and command execution tools (e.g.,python3,pytest,grep) as detailed inSKILL.md. - Sanitization: No explicit sanitization or validation of the ingested data is mentioned.
- [DYNAMIC_EXECUTION]: The skill encourages creating reproduction scripts or using
python3 -cfor testing inSKILL.md, which involves executing code generated based on the debugging context. - [COMMAND_EXECUTION]: The skill makes use of shell commands and test runners like
pytest,python3, and search tools likegrepto locate and verify defects, which are standard developer operations but represent a capability tier for the agent.
Audit Metadata