Back to skill

Security audit

complex-bug-debugging-with-ai-en

Security checks for vulnerabilities and agentic risk

Overview

This is an instruction-only debugging workflow that asks for strong tool access only when needed for complex debugging and does not include hidden code, persistence, or credential handling.

This skill is reasonable to install as a debugging process guide. If you use it with SSH, Kubernetes, database, log, or network tools, grant only the access needed for the specific incident and explicitly approve any restart, deploy, data change, or production-impacting command.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.