dynamic-debugger
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell scripts (
start_dap_mcp.sh,cleanup_debug.sh) and Python subprocess calls within its test suite and server lifecycle management. These operations are used to start/stop thedap-mcpserver and execute the code being debugged. This behavior is consistent with the skill's primary purpose as a debugging tool. - [EXTERNAL_DOWNLOADS]: Documentation within the skill recommends installing well-known debugging dependencies such as
debugpyanddap-mcpvia standard package registries (PyPI/NPM). These references target official packages and do not involve untrusted remote code execution. - [SAFE]: The skill demonstrates security best practices by being opt-in only (
disableModelInvocation: true) and providing clear documentation on the security implications of running a debugger (e.g., full filesystem access and process execution with user privileges). It also implements operational safeguards including a 4GB memory limit and a 30-minute session timeout.
Audit Metadata