openskills-runtime-debug

A troubleshooting guide for failures in the OpenSkills runtime, including sandboxed file access and native or WebAssembly script execution.

In plain words
What is it for?
Use it to reproduce runtime errors, find their root cause, preserve security boundaries, and verify fixes with focused tests.
Why use it?
It helps identify whether a failure comes from security restrictions, configuration, tool resolution, or the WebAssembly runtime.

Skill for Claude CodeCodexCursor

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/geeksfino/openskills/openskills-runtime-debug
Any agent
npx skills add Geeksfino/openskills --skill openskills-runtime-debug
Clone the repo
git clone --depth 1 https://github.com/Geeksfino/openskills

Made for: Claude Code, Codex, Cursor.

Per session 44 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 348 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00044 $0.00348
Opus 5 $0.00022 $0.00174
Sonnet 5 $0.00009 $0.00070
Haiku 4.5 $0.00004 $0.00035

Measured 2d ago against content hash 2eec91b04191, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

openskills-runtime-debug scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.cursor/skills/openskills-runtime-debug/SKILL.md · 55 lines

What it actually says

OpenSkills Runtime Debug

Use this skill when debugging runtime failures in runtime/ and execution paths used by run_skill_target, native scripts, or sandbox enforcement.

Primary Targets

  • runtime/src/executor.rs
  • runtime/src/native_runner.rs
  • runtime/src/wasm_runner.rs
  • runtime/src/permissions.rs
  • runtime/tests/*sandbox*
  • runtime/tests/seatbelt_tests.rs

Workflow

  1. Reproduce with the smallest command that fails.
  2. Classify failure bucket:
    • sandbox policy issue
    • feature/config mismatch
    • script/tool resolution issue
    • wasm runtime issue
  3. Confirm behavior against tests and existing fallback logic.
  4. Propose the smallest safe fix that preserves security boundaries.
  5. Re-run focused tests, then broader runtime tests.
cargo check -p openskills-runtime
cargo test -p openskills-runtime
cargo test -p openskills-runtime seatbelt_tests -- --nocapture

Debug Heuristics

  • Treat silent degradation in sandbox setup as high risk.
  • Prefer explicit error propagation over ignored Result.
  • If fallback behavior is intentional, confirm it is visible in logs and tests.
  • Keep macOS and Linux behavior differences explicit in findings.

Output Format

Return:

  1. Root cause
  2. Impact surface
  3. Fix proposal
  4. Verification evidence
  5. Residual risks
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 55 lines · 44 tokens per session scan A 2eec91b04191

Subscribe to this mod's changes

openskills-runtime-debug is a skill published in the GitHub repository Geeksfino/openskills (70 stars, last pushed 5d ago), licensed Apache-2.0. It adds 44 tokens to every session and 348 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.