skills/tailcallhq/forgecode/debug-cli/Gen Agent Trust Hub

debug-cli

Pass

Audited by Gen Agent Trust Hub on Aug 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill relies on executing cargo build to compile the local application and ./target/debug/forge to test its functionality. These actions are restricted to the local environment and are aligned with the skill's purpose for developers.
  • [PROMPT_INJECTION]: The skill facilitates passing user-controlled data to the CLI tool via the -p flag. 1. Ingestion points: User-supplied task strings in the prompt flag. 2. Boundary markers: Double quotes are used in instructions to delimit the strings. 3. Capability inventory: Execution of the compiled binary and local file writing for conversation dumps. 4. Sanitization: Not explicitly performed in the skill instructions; the implementation relies on the binary's internal handling.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 15, 2026, 10:24 PM
Security Audit — agent-trust-hub — debug-cli