debugging
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to gather diagnostic evidence during the debugging process.
- Evidence: Phase 1, Step 4 includes instructions to use commands such as
env | grep IDENTITY,security list-keychains, andsecurity find-identity -vto inspect environment variables and system security configurations. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input in the form of bug reports and error messages while possessing command execution capabilities, creating a potential surface for injection.
- Ingestion points: User-provided bug reports, stack traces, and error messages (SKILL.md).
- Boundary markers: No specific delimiters are defined to separate user-provided data from the agent's instructional context.
- Capability inventory: Shell command execution for diagnostics and fix implementation (Phase 1 and 4).
- Sanitization: No explicit instructions for sanitizing or escaping user-provided input before it influences the debugging process.
Audit Metadata