bugfix
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input (bug descriptions and reproduction steps) which influences code modification and shell command execution, presenting a potential vector for indirect prompt injection attacks. \n
- Ingestion points: User-supplied bug reports, reproduction steps, and behavior descriptions collected in Step 1 as defined in SKILL.md. \n
- Boundary markers: No specific delimiters or instructions to ignore embedded commands within user data are provided to the agent. \n
- Capability inventory: The skill possesses significant capabilities including the Bash tool (for testing and sorting), Write/Edit tools (for source code modification), and the Task tool (for sub-agent orchestration). \n
- Sanitization: No input validation, filtering, or sanitization of the user-provided data is mentioned in the workflow.
Audit Metadata