debug-cli
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on executing
cargo buildto compile the local application and./target/debug/forgeto test its functionality. These actions are restricted to the local environment and are aligned with the skill's purpose for developers. - [PROMPT_INJECTION]: The skill facilitates passing user-controlled data to the CLI tool via the
-pflag. 1. Ingestion points: User-supplied task strings in the prompt flag. 2. Boundary markers: Double quotes are used in instructions to delimit the strings. 3. Capability inventory: Execution of the compiled binary and local file writing for conversation dumps. 4. Sanitization: Not explicitly performed in the skill instructions; the implementation relies on the binary's internal handling.
Audit Metadata