systematic-debugging

systematic-debugging is a skill for Claude Code, Codex from phuonghx/aim-cli. It costs 90 tokens per session (855 once invoked), scanned A, original, MIT.

A step-by-step method for finding and fixing difficult software bugs. It starts by reproducing the problem, then narrows down its cause, proves the explanation, and checks the fix.

In plain words
What is it for?
It is for investigating bugs that are hard to trigger or explain. It guides developers through reproducing failures, comparing changes, isolating causes, and verifying fixes.
Why use it?
It replaces guesswork with evidence, which helps with intermittent bugs, environment-specific failures, and regressions caused by recent changes.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit It is for investigating bugs that are hard to trigger or explain. It guides developers through reproducing failures, comparing changes, isolating causes, and verifying fixes.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/phuonghx/aim-cli/systematic-debugging
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add phuonghx/aim-cli --skill systematic-debugging
Clone the repo
git clone --depth 1 https://github.com/phuonghx/aim-cli

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for systematic-debugging

README.md
[![agentmods](https://agentmods.dev/badge/skills/phuonghx/aim-cli/systematic-debugging/github.svg)](https://agentmods.dev/skills/phuonghx/aim-cli/systematic-debugging)
Your own site
<a href="https://agentmods.dev/skills/phuonghx/aim-cli/systematic-debugging"><img src="https://agentmods.dev/badge/skills/phuonghx/aim-cli/systematic-debugging/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for systematic-debugging

Your own site · 80×15
<a href="https://agentmods.dev/skills/phuonghx/aim-cli/systematic-debugging"><img src="https://agentmods.dev/badge/skills/phuonghx/aim-cli/systematic-debugging.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 90 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 855 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00090 $0.00855
Opus 5.5 $0.00036 $0.00342
Sonnet 5.5 $0.00018 $0.00171
Haiku 4.5 $0.00009 $0.00085

Measured 1mo ago against content hash e8c37683a08a, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

systematic-debugging scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

aim/templates/aim-agents/skills/systematic-debugging/SKILL.md · 95 lines

How it starts

The opening of the file, as written. The whole thing — 95 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Systematic Debugging

Guessing is the slowest way to fix a bug. A method that forces you to reproduce, narrow, explain, and confirm — in that order — turns a frustrating hunt into a short walk.

Four stages, in order

Resist the urge to edit code before you reach stage four. Each stage produces evidence that makes the next one cheaper.

Stage 1 — Reproduce it on demand

You cannot fix what you cannot trigger. Pin down the exact path to the failure.

  • Write the precise sequence: inputs, actions, environment, expected vs. actual result.
  • Record how reliably it fires — every time, most of the time, occasionally, or rarely.
  • A flaky repro is itself a clue: it points toward timing, ordering, or shared state.

Stage 2 — Shrink the search space

Cut the problem down until only the culprit remains.

  • When did it start? What landed around that time? (git log, deploy history.)
  • Does it happen everywhere, or only in one environment?
  • Strip the scenario down to the smallest snippet that still fails.
  • Bisect: find the single smallest change that flips working to broken.

Stage 3 — Explain the cause, with proof

Chase the why until you hit something that, if changed, makes the bug impossible — not merely something that makes it disappear.

Symptom  : the report endpoint returns an empty list for valid users
  why?   -> the query filters on tenant_id = NULL
  why?   -> tenant_id is never read from the request
  why?   -> the middleware that sets it runs after the handler
  why?   -> route registration order was changed in the last refactor
Root cause: middleware ordering — fix the registration, not the query

Each "why" must rest on observed evidence (a log line, a value, a diff), never on a hunch.

Stage 4 — Fix, then prove the fix

A change is not a fix until you have shown the failure is gone and nothing else broke.

  • Confirm the original repro no longer fails.
  • Exercise the surrounding behavior to check for collateral damage.
  • Add a test that would have caught this, so it cannot quietly return.
  • Scan for sibling code with the same mistake.

Read the full file on GitHub · 95 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 95 lines · 90 tokens per session scan A e8c37683a08a

Subscribe to this mod's changes

systematic-debugging is a skill published in the GitHub repository phuonghx/aim-cli (1 stars, last pushed 3mo ago), licensed MIT. It adds 90 tokens to every session and 855 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

evidence-audit

Evidence-led audit/fix rounds for any codebase in any language. Finds only defects that a runnable proof reproduces on current code, applies the narrowest in-scope patch, verifies with a second proof, promotes high-risk proofs to permanent regression tests, and reports exact validation results. Use whenever the user…

WrongStack/WrongStack · 152 tokens

bug-hunter

Use this skill when scanning source code for bugs, anti-patterns, code smells, or quality issues in a codebase, or when running a proof-driven bug hunt that must find, prove, fix, and verify one real defect. Trigger on the explicit vocabulary — "bug", "bug hunt", "/bughunt", "scan for issues", "find problems"…

WrongStack/WrongStack · 186 tokens

debugging

Use this skill when something is broken and the cause is unknown — a failing test, a crash, an error message, wrong output, a regression, a hang, or behaviour that differs between environments — and it has to be found and fixed at the root. Also use it to build the failing proof for a suspected defect before fixing…

WrongStack/WrongStack · 148 tokens

observability

Use this skill when adding or reviewing logging, metrics, or tracing in an application, or when a production problem can't be diagnosed from the signals that exist today. Triggers: user says "logging", "logs", "trace", "tracing", "metrics", "observability", "instrument", "OpenTelemetry", "structured logging", "log…

WrongStack/WrongStack · 86 tokens

container-debugging

Diagnose reported container build, startup, network, permission and resource failures. Use when an image or Compose service fails; reproduce against the final image/config and avoid data-destroying cleanup as a workaround.

WrongStack/WrongStack · 45 tokens

incident-response

Diagnose and recover an owned service incident with bounded changes, timeline evidence and verified health. Use during outages, bad deployments or data/service degradation; preserve evidence and separate mitigation from root-cause repair.

WrongStack/WrongStack · 43 tokens