debug
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user data to drive debugging workflows. * Ingestion points: The $ARGUMENTS variable in SKILL.md is used to receive problem symptoms and context. * Boundary markers: Absent; there are no delimiters or specific instructions to the agent to ignore instructions embedded within the user data. * Capability inventory: The skill utilizes agents for codebase exploration and the obsidian_append_content tool for writing to the file system. * Sanitization: No sanitization or validation of the input is performed before processing.
- [DYNAMIC_CONTEXT_INJECTION]: The skill executes shell commands to capture system state during initialization. * Evidence: Use of !date and !uname -a in the header of SKILL.md. * Analysis: These commands are executed at load time to provide context for the debugging report; they are benign informational calls consistent with the skill's intended use and do not involve user-controlled arguments or network exfiltration.
Audit Metadata