debug
Facilitates debugging of container agent issues, covering logs, environment variables, and common problems for efficient troubleshooting.
Install this skill
Security score
The debug skill was audited on Mar 3, 2026 and we found 13 security issues across 2 threat categories, including 2 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 90 | ```bash |
Access to hidden dotfiles in home directory
| 36 | | **Claude sessions** | `~/.claude/projects/` | Claude Code session history | |
Access to hidden dotfiles in home directory
| 158 | -v ~/.claude:/home/node/.claude \ |
Access to root home directory
| 27 | **Important:** The container runs as user `node` with `HOME=/home/node`. Session files must be mounted to `/home/node/.claude/` (not `/root/.claude/`) for session resumption to work. |
Access to root home directory
| 151 | # In container-runner.ts, verify mount is to /home/node/.claude/, NOT /root/.claude/ |
Access to root home directory
| 169 | containerPath: '/home/node/.claude', // NOT /root/.claude |
Access to root home directory
| 270 | - Mount target: `/home/node/.claude/` (NOT `/root/.claude/`) |
Access to root home directory
| 338 | grep -q "/home/node/.claude" src/container-runner.ts 2>/dev/null && echo "OK" || echo "WRONG - should mount to /home/node/.claude/, not /root/.claude/" |
Access to .env file
| 70 | **Fix:** Ensure `.env` file exists with either OAuth token or API key: |
Access to .env file
| 72 | cat .env # Should show one of: |
Access to .env file
| 87 | **Workaround:** The system extracts only authentication variables (`CLAUDE_CODE_OAUTH_TOKEN`, `ANTHROPIC_API_KEY`) from `.env` and mounts them for sourcing inside the container. Other env vars are not |
Access to .env file
| 184 | cp .env data/env/env |
Access to .env file
| 326 | [ -f .env ] && (grep -q "CLAUDE_CODE_OAUTH_TOKEN=sk-" .env || grep -q "ANTHROPIC_API_KEY=sk-" .env) && echo "OK" || echo "MISSING - add CLAUDE_CODE_OAUTH_TOKEN or ANTHROPIC_API_KEY to .env" |
Install this skill with one command
/learn @sskarz/debug