debug
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent on how to use various CLI tools for troubleshooting, including Laravel's
php artisan, Node.js package managers (npm,pnpm), Rust'scargo, and Docker commands. Notably,references/nuxt-debug.mdincludes a command to recursively delete directories (rm -rf .nuxt node_modules pnpm-lock.yaml) which is a powerful operation. - [EXTERNAL_DOWNLOADS]:
references/laravel-debug.mdsuggests the installation of several community-standard debugging utilities via Composer, such asbeyondcode/laravel-query-detector,itsgoingd/clockwork, andbarryvdh/laravel-debugbar. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill is designed to ingest and analyze potentially untrusted content such as user-provided error logs, terminal output, and source code files across multiple programming languages.
- Boundary markers: There are no explicit instructions or delimiters provided to ensure the agent ignores instructions that might be embedded within the data being debugged.
- Capability inventory: The agent has access to capabilities for reading system logs (
tail), executing framework commands (php artisan), managing packages (composer,npm), and modifying the file system (rm). - Sanitization: The skill lacks sanitization or validation protocols for external data ingested during the debugging process.
Audit Metadata