circleci-builds
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: Analysis of the skill instructions and references shows no evidence of malicious intent, credential theft, or unauthorized remote code execution. All external links point to official CircleCI documentation.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external data from CircleCI builds which presents a standard attack surface for indirect prompt injection.
- Ingestion points: Processes CircleCI logs, job identifiers, and test metadata (
SKILL.md,references/transient-vs-deterministic.md). - Boundary markers: No explicit delimiters or boundary markers are used to wrap external log content or metadata.
- Capability inventory: The skill is authorized to read and modify configuration and code files to apply build fixes (
SKILL.md). - Sanitization: No content sanitization or validation protocols for external inputs are defined.
Audit Metadata