fix-failing-pipelines
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: Utilizes the GitHub CLI (
gh) to perform repository management tasks, such as listing workflow runs and fetching execution logs. - [DATA_EXFILTRATION]: Retrieves and processes build logs from GitHub Actions. While necessary for debugging, this involves reading external data that may contain sensitive environment metadata.
- [INDIRECT_PROMPT_INJECTION]: The skill is vulnerable to instructions potentially embedded in failure logs, which are then passed to an autonomous 'fixing' agent.
- Ingestion points: GitHub Action logs fetched in Step 3 via
gh run view. - Boundary markers: None identified; log excerpts are interpolated directly into prompts for the next action.
- Capability inventory: The skill can modify source code and push changes directly to the
stagingbranch through the/babysitter:yoloinvocation. - Sanitization: No filtering or sanitization of the log content is performed before it is used to define the 'fix' parameters.
- [AUTONOMY_CONCERNS]: The skill explicitly bypasses human-in-the-loop controls by instructing the agent to operate without interaction or breakpoints and to commit directly to the staging branch instead of using pull requests.
Audit Metadata