systematic-debugging
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DATA_EXFILTRATION] (LOW): The skill provides diagnostic templates in Phase 1 that instruct the agent to inspect environment variables and cryptographic identities (e.g., 'security list-keychains'). While intended for debugging, this pattern could lead to exposing sensitive environmental data in logs. Severity is LOW as it is tied to the primary purpose of system diagnostics.
- [PROMPT_INJECTION] (LOW): The skill has a surface for indirect prompt injection. Evidence Chain: 1. Ingestion points: Error messages and logs (Phase 1). 2. Boundary markers: Absent. 3. Capability inventory: Bash script execution (Phase 1.4). 4. Sanitization: Absent. Malicious instructions in ingested logs could influence generated diagnostic scripts.
- [COMMAND_EXECUTION] (SAFE): The skill involves generating and executing local shell scripts for system diagnostics, which is consistent with its stated purpose and does not include unauthorized remote code execution.
Audit Metadata