systematic-debugging
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a rigorous engineering methodology for troubleshooting. No malicious obfuscation, persistence mechanisms, or unauthorized privilege escalation patterns were detected. Example diagnostic commands for inspecting environment variables use safe patterns to avoid leaking secret values.\n- [COMMAND_EXECUTION]: The inclusion of
find-polluter.shfacilitates automated testing vianpm testto identify side effects in the development environment. This behavior is consistent with the skill's purpose as a developer tool and operates within local project boundaries.\n- [PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze external error logs and test outputs, which represents a surface for indirect prompt injection.\n - Ingestion points: Error logs, stack traces, and component boundary logs mentioned in
SKILL.mdandroot-cause-tracing.md.\n - Boundary markers: No specific delimiters are defined to isolate untrusted diagnostic data from the agent's instructions.\n
- Capability inventory: Includes filesystem reads and shell execution via
npm testandfindutilities.\n - Sanitization: No specific sanitization or filtering of ingested log content is described, though the focus is on structural analysis.
Audit Metadata