pua-debugging
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill uses 'Three Iron Rules' to override the agent's internal assessment of its capabilities, specifically forbidding the agent from stating it cannot solve a problem until all possibilities are exhausted.
- [PROMPT_INJECTION]: Implements behavioral triggers that activate based on user frustration keywords (e.g., 'why does this still not work', 'stop giving up') to escalate internal 'pressure' and force different technical approaches.
- [COMMAND_EXECUTION]: Instructs the agent to proactively use tools such as
Bash,Read, andGrepto investigate logs and system state, which increases the operational footprint and potential for unintended system interaction. - [EXTERNAL_DOWNLOADS]: Mandates the use of
WebSearchto pull information from the internet when internal knowledge or tools fail, introducing external data into the agent's context. - [PROMPT_INJECTION]: The skill possesses an indirect injection surface as it ingests untrusted data from
WebSearch, local files (Read), and system output (Bash). - Ingestion points: WebSearch results, local file content via
Read, and system logs/output viaBash(SKILL.md). - Boundary markers: Absent; the skill does not define specific delimiters for untrusted data or provide 'ignore instructions' warnings for external content.
- Capability inventory: Full
Bashaccess,Readfile access, andWebSearchnetwork access (SKILL.md). - Sanitization: Absent; no explicit instructions are provided to sanitize or validate data before it influences agent reasoning or tool use.
Audit Metadata