Install
$ agentstack add skill-yuxiang-ma-agent-skills-debug-ledger ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Debug Ledger
Failures are data. Keep them in a structured ledger from the first bug, in a plan file that lives in the repo — not in the conversation.
The ledger format
A table in the plan/notes file, one row per defect:
| found | evidence | fix | verified by | |---|---|---|---| | what was wrong | the number/observation that exposed it | what changed | the re-run number |
Plus a rejected-ideas list: variant, motivation, measured result, verdict. A rejected idea with a number ("quadratic background: rho 0.61 → 0.50, absorbs real signal — rejected") prevents the next person (or the next session) from re-trying it.
Rules
- Write the row when the fix lands, not at the end — end-of-session
reconstruction loses the evidence column.
- Negative results are deliverables. A method that fails out-of-domain
with a number (in-domain 0.96 → out-of-domain 0.04) is a finding; keep it in the final report/site, typically as a collapsed section.
- Every fix names its regression check — what re-ran to prove the fix,
and that previously-passing checks still pass. An optimization that flips a previously-green test is a new ledger row, not a footnote.
- Plan file discipline (long sessions): goals, phases with checkboxes,
key facts (paths, constants, auth), the ledger, and current status — updated as phases close. After context loss, the plan file is the resume point.
- Version-stamp regenerable artifacts (
pipeline_versionin outputs) so a
fixed pipeline invalidates stale outputs mechanically instead of by memory.
- "I launched it" is not "it is running." Before recording progress on a
long job, confirm the process exists and its output is growing. A waiter built on pgrep -f "" matched its own shell command line, never cleared, and spun for five hours while the job it was waiting for had never started — the log sat at 0 bytes and two progress updates were reported from it. Use a self-exclusion ([p]attern), check the output file size, and prefer a blocking foreground run when a result must be observed. Delegated workers are the common victim: several backgrounded their own jobs and returned empty-handed, so the controller re-ran and collected the results itself.
- Re-measure timings on an idle machine before quoting them. Profiling
under concurrent load overstated per-frame cost by 3–8x and turned a ~17-minute job into an "85 minute" estimate that was then used to frame a scope decision. A cost number that changes a plan deserves one clean measurement.
When to surface it
- In results pages/reports: a "what actually went wrong" section builds
more trust than the headline metric.
- In commit messages: the defect and its evidence, not just the change.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: Yuxiang-Ma
- Source: Yuxiang-Ma/agent-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.