fix-push
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
pnpm qato perform quality assurance checks andgit pushto synchronize changes with a remote repository. These commands are standard for development environments and are used according to their intended purpose. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and act on feedback from external sources like linting tools, test runners, and code reviews, creating a potential surface for indirect prompt injection.
- Ingestion points: Addressing lint, types, tests, and review feedback in step 1.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potentially malicious content within the feedback.
- Capability inventory: The skill allows execution of
pnpm qaandgit pushbased on the processed data. - Sanitization: No sanitization or filtering logic is present for the external data ingested during the fixing step.
Audit Metadata