systematic-debugging
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The skill includes a bash script (
find-polluter.sh) and documentation examples (e.g.,npm test,security list-keychains) used for environment diagnostics and troubleshooting. These commands are executed locally and are consistent with the primary developer-focused purpose of the skill. - [PROMPT_INJECTION] (LOW): The skill instructs the agent to analyze untrusted data (error messages and logs), creating a surface for indirect prompt injection (Category 8).
- Ingestion points: Phase 1.1 in SKILL.md and root-cause-tracing.md direct the agent to read error messages and stack traces.
- Boundary markers: No specific delimiters or 'ignore instructions' markers are specified for processing untrusted log data.
- Capability inventory: Shell execution is available through terminal access and the provided bisection script.
- Sanitization: No explicit sanitization or filtering of the content within error messages is mandated before the agent processes them.
Audit Metadata