meticulous-fix
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon untrusted data from external sources, specifically comments on Meticulous test runs and check results. These comments are treated as the primary source of instructions for code changes.
- Ingestion points: The agent retrieves external instructions via
meticulous agent diff-commentsandmeticulous agent check-comments(or their MCP equivalents). - Boundary markers: There are no explicit boundary markers or instructions to disregard malicious directives embedded within the processed comments. The skill explicitly tells the agent to "just work out what needs to change and make it happen."
- Capability inventory: The agent has the capability to modify the local source code, commit changes, push code via
git, and post comments to pull request platforms usinggh,glab, ortwgtools. - Sanitization: The instructions do not define any sanitization or validation logic for the external comment content before it is interpreted by the agent.
- [COMMAND_EXECUTION]: The skill extensively uses shell commands and CLI tools to interact with the development environment and external services. This includes the
meticulousCLI for test data,gitfor version control, and platform-specific tools likegh(GitHub),glab(GitLab), andtwg(Teamwork Graph) for interacting with pull requests.
Audit Metadata