systematic-debugging
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes
find-polluter.sh, a bash utility that automates the execution ofnpm teston multiple files based on user-provided patterns to identify state-polluting tests. - [DYNAMIC_EXECUTION]: The instructions mandate that the agent generate and run 'diagnostic instrumentation' (Phase 1, Step 4) to gather evidence at component boundaries, which involves creating and executing ad-hoc shell scripts at runtime.
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and analyze untrusted data from external sources, specifically error messages, stack traces, and multi-component logs (Phase 1, Step 1 and 4).
- Ingestion points: System error messages, stack traces, and cross-component logs (e.g., build scripts, signing logs).
- Boundary markers: Absent; the skill does not specify delimiters or instructions to ignore embedded commands within the error data.
- Capability inventory: Shell execution (
npm test,codesign), keychain inspection (security), and file system operations. - Sanitization: Absent; the skill does not provide methods for escaping or filtering content from processed error logs.
Audit Metadata