Agent skill · Audited from source
systematic-debugging
skill · spencerpauly/awesome-cursor-skillsCC0-1.0 licenceAudited 31 Oct 2026 · source 94fd3401595c
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 94fd3401595c and found no filesystem, network or shell access and no hard-coded secrets. What it does: Structured debugging methodology — reproduce, isolate, hypothesize, verify. Covers git bisect, binary search, logging, and minimal reproduction.
Cite
Cite this page
ModelsAtlas. “systematic-debugging (spencerpauly/awesome-cursor-skills)”. Retrieved 31 Oct 2026. https://modelsatlas.com/skills/spencerpauly/systematic-debugging
10 skills are called “systematic-debugging”. You are viewing spencerpauly/awesome-cursor-skills.
- spencerpauly/awesome-cursor-skills★ 870✓SAFE
- obra/superpowers★ 306k✓SAFE
- jnMetaCode/superpowers-zh★ 8.3k✓SAFE
- xintaofei/codeg★ 3.9k✓SAFE
- foryourhealth111-pixel/Vibe-Skills★ 3.6k✓SAFE
and 5 more with this name.
Trust audit
Audit 0.4.1 · source read 31 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (0)
No findings at any severity. We re-audit when the source changes.
Audit 0.4.1 · source sha 94fd3401595c · 31 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherspencerpauly GitHub userOwner of the repository this skill is read from
- Source folderspencerpauly/awesome-cursor-skills/resources/systematic-debuggingThe exact folder we audited
- LicenceCC0-1.0As the repository states it
- Commit pinned for this verdict94fd3401595cA new audit runs when the source changes
- Repository statusNot archivedLast push 90 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Structured debugging methodology — reproduce, isolate, hypothesize, verify. Covers git bisect, binary search, logging, and minimal reproduction.
--- name: systematic-debugging description: Structured debugging methodology — reproduce, isolate, hypothesize, verify. Covers git bisect, binary search, logging, and minimal reproduction. user-invocable: true --- # Systematic Debugging Debug methodically instead of randomly changing code. ## The Process ### 1. Reproduce Before anything else, reproduce the bug reliably: - Get the exact steps to trigger the issue - Note the expected vs actual behavior - Confirm it happens consistently (not intermittent) - Record the environment (OS, Node version, browser, etc.) If you can't reproduce it, you can't fix it. Ask for more details. ### 2. Isolate Narrow down where the bug lives: **Binary search the codebase:** - Comment out half the system → does the bug persist? - If yes, the bug is in the remaining half → repeat - If no, the bug is in the commented-out half → repeat **Git bisect:** ```bash git bisect start git bisect bad # current commit is broken git bisect good <sha> # this commit was working # Git checks out the midpoint — test it git bisect good # or git bisect bad # Repeat until it finds the first bad commit git bisect reset # when done ``` **Isolate by layer:** - Is it frontend or backend? (Check network tab) - Is it the database? (Query directly) - Is it the API? (curl the endpoint) - Is it the component? (Render it in isolation) ### 3. Hypothesize Form a specific, testable hypothesis: - "The bug is caused by X because Y" - Not "something is wrong with the data" - Good: "The `userId` is null because the auth middleware doesn't run on this route" ### 4. Test the Hypothesis Write the smallest possible test that proves/disproves your hypothesis: - Add a `console.log` or breakpoint at the suspected location - Check the value of the suspected variable - If your hypothesis is wrong, go back to step 3 with new information - If it's right, you've found the bug ### 5. Fix and Verify - Apply the minimal fix - Verify the original reproduction steps no longer trigger the bug - Check for regressions — did the fix break anything else? - Write a test that would have caught this bug ## Debugging Tools | Scenario | Tool | |----------|------| | "It worked before" | `git bisect` | | "I don't know where this runs" | Add logging at entry/exit of suspect functions | | "The data looks wrong" | Inspect at each transformation step | | "It only fails in production" | Compare env vars, check logs, try to reproduce with prod data locally | | "It's intermittent" | Look for race conditions, timing issues, or uninitialized state | | "The error message is useless" | Search the codebase for where that error is thrown | ## Common Bug Patterns - **Off-by-one**: Array indices, pagination, date ranges - **Null/undefined**: Missing optional chaining, uninitialized state - **Race condition**: Async operations completing in unexpected order - **Stale closure**: React useEffect/useCallback capturing old values - **Type coercion**: `==` vs `===`, string vs number comparisons - **Missing await**: Forgetting `await` on async functions - **Environment mismatch**: Works locally, fails in CI/prod due to different env vars or versions ## Rules - Never guess — always verify with evidence - Fix the root cause, not the symptom - If you've spent 15 minutes without progress, step back and re-isolate - Document what you tried so you don't repeat failed approaches
Excerpt, first 3,423 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 94fd340
git clone https://github.com/spencerpauly/awesome-cursor-skills git -C awesome-cursor-skills checkout 94fd3401595c
The author documents no install command, so this uses the repository directly. Our verdict covers commit 94fd3401595c only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
94fd3401595c
Similar skills
All coding & review skills →obra/superpowers
Use when creating new skills, editing existing skills, or verifying skills work before deployment
mattpocock/skills
A relentless interview to sharpen a plan or design, which also creates docs (ADR's and glossary) as we go.
mattpocock/skills
Grill the user relentlessly about a plan, decision, or idea. Use when the user wants to stress-test their thinking, or uses any 'grill' trigger phrases.
Questions about systematic-debugging
What does the systematic-debugging skill do?
Is systematic-debugging safe to install?
What can systematic-debugging access on my machine?
How current is this page?
Sources
- github.com/spencerpauly/awesome-cursor-skills/tree/main/resource — the audited source at commit 94fd3401595c and every finding aboveObserved · 31 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the systematic-debugging skill do?
- Is systematic-debugging safe to install?
- What can systematic-debugging access on my machine?