$npx -y skills add Geeksfino/openskills --skill openskills-runtime-debugDiagnose openskills-runtime execution failures in sandboxed paths (Landlock, seatbelt, native script execution, wasm execution) and produce root-cause-first findings with minimal-risk remediation steps.
| 1 | # OpenSkills Runtime Debug |
| 2 | |
| 3 | Use this skill when debugging runtime failures in `runtime/` and execution paths used by `run_skill_target`, native scripts, or sandbox enforcement. |
| 4 | |
| 5 | ## Primary Targets |
| 6 | |
| 7 | - `runtime/src/executor.rs` |
| 8 | - `runtime/src/native_runner.rs` |
| 9 | - `runtime/src/wasm_runner.rs` |
| 10 | - `runtime/src/permissions.rs` |
| 11 | - `runtime/tests/*sandbox*` |
| 12 | - `runtime/tests/seatbelt_tests.rs` |
| 13 | |
| 14 | ## Workflow |
| 15 | |
| 16 | 1. Reproduce with the smallest command that fails. |
| 17 | 2. Classify failure bucket: |
| 18 | - sandbox policy issue |
| 19 | - feature/config mismatch |
| 20 | - script/tool resolution issue |
| 21 | - wasm runtime issue |
| 22 | 3. Confirm behavior against tests and existing fallback logic. |
| 23 | 4. Propose the smallest safe fix that preserves security boundaries. |
| 24 | 5. Re-run focused tests, then broader runtime tests. |
| 25 | |
| 26 | ## Recommended Commands |
| 27 | |
| 28 | ```bash |
| 29 | cargo check -p openskills-runtime |
| 30 | cargo test -p openskills-runtime |
| 31 | cargo test -p openskills-runtime seatbelt_tests -- --nocapture |
| 32 | ``` |
| 33 | |
| 34 | ## Debug Heuristics |
| 35 | |
| 36 | - Treat silent degradation in sandbox setup as high risk. |
| 37 | - Prefer explicit error propagation over ignored `Result`. |
| 38 | - If fallback behavior is intentional, confirm it is visible in logs and tests. |
| 39 | - Keep macOS and Linux behavior differences explicit in findings. |
| 40 | |
| 41 | ## Output Format |
| 42 | |
| 43 | Return: |
| 44 | |
| 45 | 1. Root cause |
| 46 | 2. Impact surface |
| 47 | 3. Fix proposal |
| 48 | 4. Verification evidence |
| 49 | 5. Residual risks |