diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions guide the agent to perform standard software engineering tasks, such as running test suites (Playwright, Puppeteer), using version control commands (git bisect), and executing local scripts. These actions are appropriate for the skill's stated purpose of debugging and occur within the user's development environment.
- [EXTERNAL_DOWNLOADS]: The workflow mentions using curl or wget to interact with local development servers or replay captured network traces. It does not involve downloading or executing code from untrusted third-party sources.
- [DATA_EXFILTRATION]: While the skill involves reading logs and network traces (HAR files), there are no instructions or mechanisms to transmit this information to external or unauthorized domains.
- [PROMPT_INJECTION]: The skill processes external data such as project documentation (CONTEXT.md) and log files, which is a potential surface for indirect prompt injection. However, this is an inherent part of the debugging process and no malicious override instructions were found in the skill content.
Audit Metadata