hotfix
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to perform git operations, such as creating branches (git checkout -b). This is a legitimate part of the described workflow and is gated by AskUserQuestion to ensure user approval before execution.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface (Category 8) by ingesting untrusted bug descriptions. 1. Ingestion points: Reads user-provided bug IDs or descriptions in Phase 1 to assess severity. 2. Boundary markers: Missing markers or instructions to treat the ingested data as non-executable text. 3. Capability inventory: Includes Bash for shell access, Write and Edit for file modification, and Task for spawning sub-agents. 4. Sanitization: No input validation or sanitization of the bug description is performed. 5. Mitigation: The high reliance on user confirmation for critical steps significantly mitigates the impact of potential injection attacks.
Audit Metadata