systematic-debugging
Use when encountering a bug, failing test, broken integration, or unexpected behavior, before proposing fixes.
Skill by Threat-Vector-Security
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/threat-vector-security-systematic-debugging
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: testing
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md and code. Checked Oct 26, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/systematic-debugging
What's inside
- Skill name
systematic-debugging- Description
- Use when encountering a bug, failing test, broken integration, or unexpected behavior, before proposing fixes.
- License
- Apache-2.0
- Instructions
- 63 lines in SKILL.md · view on GitHub
Files (5)
- SKILL.md
- condition-based-waiting.md · references/
- defense-in-depth.md · references/
- root-cause-tracing.md · references/
- skill.json
SKILL.md (first lines)
# Systematic Debugging ## Overview / When to Use Do not guess. Find the root cause before changing code, config, or prompts. No fixes without investigation first. If you have not reproduced the issue, read the errors, and traced where the bad state comes from, you are not ready to fix it. ## Process 1. Capture the exact failure. - Record the command, request, or user action that fails. - Read the full error output, stack trace, and relevant logs. - If the issue is intermittent, collect enough evidence to describe the pattern. 2. Reproduce the issue consistently. - Prefer the narrowest reliable reproduction. - If you cannot reproduce it, gather more evidence instead of guessing. 3. Check recent changes and working examples. - Look at the diff, config changes, dependency changes, and comparable working code paths. 4. Trace backward to the source of the bad value or state. - Start where the failure appears. - Keep moving backward until you find where the wrong input, assumption, or transition originated. 5. Form one hypothesis and test it with the smallest useful change. - Change one thing at a time. - If the hypothesis fails, return to investigation with the new evidence. 6. Add a regression test or equivalent reproducible check before the permanent fix. 7. Verify the fix with the original reproduction and the regression test. ## Common Rationalizations | Rationalization | Reality | |---|---| | "I know what this is, I'll just fix it." | Guessing leads to incomplete fixes or new bugs. Reproduce and trace it first. | | "I'll try fixing three things at once to save time." | Multiple changes obscure which one actually fixed the issue or introduced regressions. Change one thing at a time. | | "I'll skip the regression test since I manually verified it." | If it broke once, it will break again. Add a reproducible check before calling it done. | ## Red Flags Stop and return to investigation if you catch yourself: - proposing multiple fixes at once - saying "it is probably X" - patching symptoms without tracing source state - skipping a failing test because manual verification seems faster - trying a fourth fix after three failed attempts (this means the architecture or assumption is wrong) ## Verification - [ ] The exact failure has been captured and reproduced consistently. - [ ] The root cause has been traced backward to the source of the bad state. - [ ] A regression test (or equivalent reproducible check) has been added. - [ ] The fix passes both the original reproduction and the regression test. ## Supporting References - Read [references/root-cause-tracing.md](./references/root-cause-tracing.md) when the error is deep in a call stack or event chain. - Read [references/condition-based-waiting.md](./references/condition-based-waiting.md) when the issue looks timing-related or flaky. - Read [references/defense-in-depth.md](./references/defense-in-depth.md) after finding the root cause and you need follow-up validation at multiple layers. ## Related Skills - Use `test-driven-development` when you need the regression test and implementation loop. - Use `verification-before-completion` before claiming the issue is fixed.
From Threat-Vector-Security/guardian-agent, Apache-2.0.
More from Threat-Vector-Security/guardian-agent
- 0.601score
context-engineering
Threat-Vector-Security
Use when starting a repo-grounded task, switching subsystems, or when output quality drops and the agent needs tighter project context from rules, specs…
SkillBFreshness: B★ 13Claude Code +9 - 0.601score
source-driven-development
Threat-Vector-Security
Use when implementing or reviewing framework-specific code that should be verified against current official docs, versioned guidance, or source-cited examples…
SkillBFreshness: B★ 13Claude Code +9 - 0.601score
security-triage
Threat-Vector-Security
Use when the user is reviewing a security alert, posture change, suspicious network behavior, firewall issue, or combined monitoring output.
SkillBFreshness: B★ 13Claude Code +9 - 0.598score
mcp-builder
Threat-Vector-Security
Guide for building high-quality MCP (Model Context Protocol) servers and tool suites.
SkillBFreshness: B★ 13Claude Code +9 - 0.598score
skill-creator
Threat-Vector-Security
Guide for creating new skills, improving existing skills, and evaluating skill quality.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
receiving-code-review
Threat-Vector-Security
Use when addressing code review or QA feedback, especially when the feedback is unclear, broad, or technically questionable.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
deep-research
Threat-Vector-Security
Use when the task needs investigation first, especially to compare code paths, trace behavior, or synthesize findings before implementation.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
code-review
Threat-Vector-Security
Use when reviewing a diff, PR, or patch for bugs, regressions, missing tests, architecture risk, security risk, or reviewability concerns before merge.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
coding-workspace
Threat-Vector-Security
Use when the request is about a repo, codebase, implementation, bugfix, or backend-owned coding session that should stay anchored to the active workspace.
SkillBFreshness: B★ 13Claude Code +9 - 0.571score
verification-before-completion
Threat-Vector-Security
Use when about to claim work is complete, fixed, or passing, or before committing or handing off results.
SkillBFreshness: B★ 13Claude Code +9 - 0.571score
coding-backend-orchestration
Threat-Vector-Security
Use when the user explicitly asks Guardian to launch or check an external coding assistant such as Codex, Claude Code, Gemini CLI, or Aider.
SkillBFreshness: B★ 13Claude Code +9 - 0.570score
test-driven-development
Threat-Vector-Security
Use when implementing or changing code behavior, before writing production code.
SkillBFreshness: B★ 13Claude Code +9
Signals
- Stars
- 13
- Forks
- 3
- Open issues
- 0
- Last commit (this folder)
- Apr 4, 2026 (6 months ago)
- Last release
- Sep 9, 2026 (1 month ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- Apache-2.0
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from Threat-Vector-Security
- 0.601score
context-engineering
Threat-Vector-Security
Use when starting a repo-grounded task, switching subsystems, or when output quality drops and the agent needs tighter project context from rules, specs…
SkillBFreshness: B★ 13Claude Code +9 - 0.601score
source-driven-development
Threat-Vector-Security
Use when implementing or reviewing framework-specific code that should be verified against current official docs, versioned guidance, or source-cited examples…
SkillBFreshness: B★ 13Claude Code +9 - 0.601score
security-triage
Threat-Vector-Security
Use when the user is reviewing a security alert, posture change, suspicious network behavior, firewall issue, or combined monitoring output.
SkillBFreshness: B★ 13Claude Code +9 - 0.598score
mcp-builder
Threat-Vector-Security
Guide for building high-quality MCP (Model Context Protocol) servers and tool suites.
SkillBFreshness: B★ 13Claude Code +9 - 0.598score
skill-creator
Threat-Vector-Security
Guide for creating new skills, improving existing skills, and evaluating skill quality.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
receiving-code-review
Threat-Vector-Security
Use when addressing code review or QA feedback, especially when the feedback is unclear, broad, or technically questionable.
SkillBFreshness: B★ 13Claude Code +9
Cite this page
systematic-debugging skill. Agent Mart. https://agentmart.dev/skills/threat-vector-security-systematic-debugging (last updated 2026-10-24)