skills/zapabob/skills/python-debugpy/Gen Agent Trust Hub

python-debugpy

Fail

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: HIGHPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill instructs the user to execute echo 0 | sudo tee /proc/sys/kernel/yama/ptrace_scope. This command uses sudo to escalate privileges and modifies a kernel security parameter to allow any process to attach to others via ptrace, which significantly weakens the system's security posture against process injection attacks.
  • [EXTERNAL_DOWNLOADS]: The skill contains instructions to install external Python packages using pip install debugpy and pip install remote-pdb. While these are well-known debugging tools, they represent the introduction of external code dependencies.
  • [COMMAND_EXECUTION]: The skill utilizes several shell commands for system interaction and debugging, including nc (netcat) for network connections to local ports, ss for socket monitoring, and rg (ripgrep) for searching source files.
  • [DYNAMIC_EXECUTION]: The skill promotes the use of pdb's !stmt and interact commands, which allow for the dynamic execution of arbitrary Python code within the context of the debugged process.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 5, 2026, 12:08 PM