fix-small-bug
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is intended to process and modify external source code repositories, which serves as an ingestion point for untrusted data. A malicious actor could embed instructions within code comments or documentation that attempt to influence the agent's behavior during the fix process.
- Ingestion points: External source code files within a repository (implied by the "source-code-repository" context).
- Boundary markers: The instructions lack explicit delimiters or guidance for the agent to distinguish between valid source code and potentially malicious instructions embedded within that code.
- Capability inventory: The skill description implies the agent will have the capability to write or edit files in the repository to implement fixes.
- Sanitization: There are no instructions provided for sanitizing or validating the contents of the repository before the agent processes or acts upon it.
Audit Metadata