502-defect-resolution
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads defect descriptions and reproduction steps from the
.specflow/docs/D11-exploratory-defects.mdfile, which is an external ingestion point. This natural language content is used as a 'failure anchor' to drive the behavior of the402-test-correctionskill. The instructions lack defined boundary markers or sanitization procedures, providing a surface where malicious instructions embedded in the defect backlog could influence the agent's investigation or status-mapping logic.\n- [COMMAND_EXECUTION]: The skill has the capability to modify source code and test files and is explicitly instructed to 'commit the change'. This involves executing Git commands to persist changes to the repository, which is a powerful capability provided to the agent to fulfill its primary purpose.
Audit Metadata