debug-rule
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of the
opentaintcommand-line utility. Specifically, it usesopentaint test rule reachabilityto diagnose why security rules may fail to detect specific code patterns. These commands are executed locally to generate and analyze reachability data. - [DATA_INGESTION]: The agent is instructed to read and interpret external files, including SARIF reports (
debug-ifds-fact-reachability.sarif) and YAML configuration files (dropped-external-methods.yaml). These files are used as diagnostic inputs to trace the path of 'tainted' data through a program's project model. - [FILE_SYSTEM_ACCESS]: The skill interacts with the local file system to read project models and write diagnostic results to designated output directories (e.g.,
.opentaint/test-results/). These operations are consistent with the stated purpose of debugging a static analysis tool.
Audit Metadata