systematic-debugging
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
find-polluter.shscript executes thenpm testcommand on files matching a user-provided pattern. TheSKILL.mdandroot-cause-tracing.mdfiles also suggest usinggit,codesign, andsecuritycommands for diagnostic evidence gathering. - [PROMPT_INJECTION]: The skill uses directive instructions to prioritize systematic investigation over immediate fixes, such as "ALWAYS find root cause before attempting fixes." This influences the agent's task-solving strategy but does not target safety guardrails.
- [PROMPT_INJECTION]: The skill facilitates the processing of untrusted data such as logs and error messages, creating a surface for indirect instructions.
- Ingestion points: Error messages, stack traces, and log data are ingested in
SKILL.md(Phase 1) androot-cause-tracing.md. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the documentation examples.
- Capability inventory: The skill uses
npm testinfind-polluter.shand suggests several CLI tools for system inspection. - Sanitization: There is no evidence of sanitization or filtering of the ingested log and error data before analysis.
Audit Metadata