bugfix
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it retrieves and processes untrusted content from GitHub issues.
- Ingestion points: The agent reads issue titles, bodies, and comments using the
gh issue viewcommand inSKILL.md(Step 3a). - Boundary markers: There are no instructions to use delimiters or ignore instructions found within the issue data.
- Capability inventory: The skill uses powerful tools including
git(commit/push),gh(PR creation), and project build systems likenpmorcargo(test/lint). - Sanitization: No validation or sanitization is performed on the ingested issue content before the agent acts upon it.
- [COMMAND_EXECUTION]: The skill executes local shell commands such as
git,gh,npm, andcargo. These commands are necessary for the skill's stated goal of fixing bugs and managing pull requests.
Audit Metadata