systematic-debugging
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a utility script
find-polluter.shthat executes shell commands (npm test) on files identified through a user-specified search pattern. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves the agent ingesting and analyzing untrusted external data, such as error logs, stack traces, and build outputs, to identify root causes. This creates a surface for indirect prompt injection if the logs contain adversarial instructions.
- Ingestion points: Error messages, stack traces, and component logs analyzed during 'Phase 1: Root Cause Investigation' in
SKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' warnings for the analyzed logs.
- Capability inventory: The skill utilizes shell command execution for diagnostics (e.g.,
security,codesign,env) and test bisection (npm testviafind-polluter.sh). - Sanitization: No explicit sanitization or filtering of log content is described before processing.
Audit Metadata