Install
$ agentstack add skill-kreek-consult-debugging ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Debugging
Iron Law
NO FIX WITHOUT ROOT-CAUSE EVIDENCE.
When to Use
- Investigating defects, flakes, timing-sensitive bugs, regressions,
production incidents, unclear failures, or "stuck" debugging sessions.
When NOT to Use
- Planned refactors with no failing behavior; use
refactoring. - Performance investigation where the symptom is slowness; use
performance.
- Git-history regression search mechanics; pair with
git-workflow.
Core Ideas
- Reproduce before fixing. Change one variable per experiment.
- Reduce the failing case until only the bug remains. Localize by
boundary: data, service, integration, application, infrastructure.
- Debugging should improve the human's failure model with evidence.
- Fix causes, not symptoms.
- For incidents, produce blameless learning with owned follow-up
actions, never "human error" as a root cause.
Workflow
- Capture the exact symptom: command, input, output, stack trace,
timing, environment. Reproduce reliably or record why reproduction isn't yet possible.
- After the third experiment, keep a short debug log. Form one
hypothesis at a time, predict what else must be true, run the smallest experiment that confirms or refutes it.
- Before editing, state the current failure model: likely cause,
evidence for it, and the observation that would disprove it.
- Fix the identified cause. Add a regression test or operational
guard before declaring fixed.
Verification
- [ ] The bug reproduces on pre-fix code or non-reproducibility is
documented.
- [ ] The root cause is named in one sentence, explains all observed
symptoms, and identifies evidence that ruled out main alternatives.
- [ ] The fix is one atomic change aimed at that cause, with a
regression test or equivalent guard that fails before and passes after.
- [ ] Timing-sensitive bugs were verified with non-invasive observation or
replay.
- [ ] Incident follow-ups have owners and deadlines.
- [ ] Unproven root-cause or fix claims are reported as unproven.
Tripwires
| Trigger | Do this instead | False alarm | |---|---|---| | "Probably X, let me try fixing" | Gather evidence that confirms X before editing. | The user asked for a speculative explanation, not a fix. | | "No time to reproduce" | Create the smallest reproduction or state why reproduction is blocked. | Production-only incident where logs/traces are the available reproduction. | | "One more guess and it'll work" | Stop editing. Collect a new observation that changes the model. | A syntax or wiring typo found directly in the failing output. | | "The agent found a fix but I can't explain the bug" | Stop and rebuild the failure model before editing further. | Disposable local experiment with no completion claim. | | "Fixed it locally, ship it" | Name the root cause and add or run the regression guard. | Local run is the requested diagnostic, not a completion claim. | | "Flake - just retry" | Treat the flake as a bug and identify whether test, code, or environment failed. | Infrastructure outage already confirmed outside the code under review. | | "Probably a race condition" | Show interleaving, shared state, or timing evidence before changing concurrency code. | The race is already demonstrated by a failing sanitizer or trace. |
Handoffs
- Use
prooffor fix-claim evidence and the regression test shape. - Use
git-workflowforgit bisect, reflog recovery, or conflict-heavy
debugging.
- Use
observabilitywhen the right evidence must come from logs,
metrics, traces, or incident timelines.
- Use
error-handlingwhen the root cause is an error boundary,
retry, timeout, or recovery contract.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: kreek
- Source: kreek/consult
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.