openskills-runtime-debug

openskills-runtime-debug is a skill for Cursor from Geeksfino/openskills. It costs 44 tokens per session (348 once invoked), scanned A, original, Apache-2.0.

A troubleshooting guide for failures in the OpenSkills runtime, including sandboxed file access and native or WebAssembly script execution.

In plain words
What is it for?
Use it to reproduce runtime errors, find their root cause, preserve security boundaries, and verify fixes with focused tests.
Why use it?
It helps identify whether a failure comes from security restrictions, configuration, tool resolution, or the WebAssembly runtime.

Skill for Cursor

Written for Cursor: installed under .cursor/.

Good fit Use it to reproduce runtime errors, find their root cause, preserve security boundaries, and verify fixes with focused tests.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/geeksfino/openskills/openskills-runtime-debug
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add Geeksfino/openskills --skill openskills-runtime-debug
Clone the repo
git clone --depth 1 https://github.com/Geeksfino/openskills

Made for: Cursor.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for openskills-runtime-debug

README.md
[![agentmods](https://agentmods.dev/badge/skills/geeksfino/openskills/openskills-runtime-debug/github.svg)](https://agentmods.dev/skills/geeksfino/openskills/openskills-runtime-debug)
Your own site
<a href="https://agentmods.dev/skills/geeksfino/openskills/openskills-runtime-debug"><img src="https://agentmods.dev/badge/skills/geeksfino/openskills/openskills-runtime-debug/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for openskills-runtime-debug

Your own site · 80×15
<a href="https://agentmods.dev/skills/geeksfino/openskills/openskills-runtime-debug"><img src="https://agentmods.dev/badge/skills/geeksfino/openskills/openskills-runtime-debug.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 44 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 348 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00044 $0.00348
Opus 5.5 $0.00018 $0.00139
Sonnet 5.5 $0.00009 $0.00070
Haiku 4.5 $0.00004 $0.00035

Measured 1mo ago against content hash 2eec91b04191, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

openskills-runtime-debug scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.cursor/skills/openskills-runtime-debug/SKILL.md · 55 lines

What it actually says

OpenSkills Runtime Debug

Use this skill when debugging runtime failures in runtime/ and execution paths used by run_skill_target, native scripts, or sandbox enforcement.

Primary Targets

  • runtime/src/executor.rs
  • runtime/src/native_runner.rs
  • runtime/src/wasm_runner.rs
  • runtime/src/permissions.rs
  • runtime/tests/*sandbox*
  • runtime/tests/seatbelt_tests.rs

Workflow

  1. Reproduce with the smallest command that fails.
  2. Classify failure bucket:
    • sandbox policy issue
    • feature/config mismatch
    • script/tool resolution issue
    • wasm runtime issue
  3. Confirm behavior against tests and existing fallback logic.
  4. Propose the smallest safe fix that preserves security boundaries.
  5. Re-run focused tests, then broader runtime tests.
cargo check -p openskills-runtime
cargo test -p openskills-runtime
cargo test -p openskills-runtime seatbelt_tests -- --nocapture

Debug Heuristics

  • Treat silent degradation in sandbox setup as high risk.
  • Prefer explicit error propagation over ignored Result.
  • If fallback behavior is intentional, confirm it is visible in logs and tests.
  • Keep macOS and Linux behavior differences explicit in findings.

Output Format

Return:

  1. Root cause
  2. Impact surface
  3. Fix proposal
  4. Verification evidence
  5. Residual risks
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 55 lines · 44 tokens per session scan A 2eec91b04191

Subscribe to this mod's changes

openskills-runtime-debug is a skill published in the GitHub repository Geeksfino/openskills (71 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 44 tokens to every session and 348 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

tool-calling-tutor

Use when a tool-calling agent does not call a tool, sends wrong arguments, loops without stopping, or needs a function schema. Guides a four-branch diagnosis and five-step schema repair. Do not use for framework-specific, MCP-server, or production-observability questions.

WenyuChiou/awesome-agentic-ai-zh · 62 tokens

troubleshooting-datavault4dbt

Diagnoses common datavault4dbt failures — satellites capturing too many or too few rows, multi-source high-water-mark issues, ghost-record/datatype errors, and YAML-metadata compile errors. Use when a datavault4dbt model errors on compile or run, a satellite detects the wrong number of changes, or a hub/link/satellite…

ScalefreeCOM/datavault4dbt-agent-skills · 87 tokens

lsp-investigate

Investigate code using LSP tools. Register a project, then use definitions, references, call hierarchies, type hierarchies, hover, and diagnostics to understand code structure, trace bugs, and assess change impact.

karellen/karellen-lsp-mcp · 45 tokens

code-health-check

Perform a comprehensive code health check on a directory. Use when the user asks to analyze code quality, find issues, or get a health report.

huangjia2019/claude-code-engineering · 33 tokens

chief-data-officer-advisor

Chief Data Officer advisory for startups: AI training data rights and consent provenance, data product strategy (warehouse vs lakehouse vs mesh, build-vs-buy), B2B customer-data-as-asset valuation and M&A readiness, data team org evolution. Use when deciding whether to train models on customer data, choosing data…

alirezarezvani/claude-skills · 131 tokens

general-counsel-advisor

General Counsel advisory for startups: contract review (MSA, SaaS, NDA, DPA, employment), IP strategy, term sheet decoding, and regulatory landscape mapping. Use when reviewing any contract or term sheet, deciding when to engage outside counsel, defining IP strategy, evaluating regulatory exposure (HIPAA, GDPR, FDA…

alirezarezvani/claude-skills · 114 tokens