security-fix-finding
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The workflow explicitly instructs the agent to run setup, build, and test commands found within the target repository. This is an expected part of the security remediation lifecycle.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon external security finding data. 1. Ingestion points: Finding details (title, vulnerable path, attacker input, PoC) are extracted in the 'Inputs' phase. 2. Boundary markers: None explicitly mentioned for the input data. 3. Capability inventory: The agent is authorized to execute shell commands for repo setup, build processes, and test execution. 4. Sanitization: The skill relies on manual and automated validation of the final code change rather than pre-sanitizing the input data.
Audit Metadata