pr-fix
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted pull request metadata and CI logs. Instructions warn to treat this as data, yet the core functionality involves executing commands extracted from these logs. Ingestion points include CI logs and workflow YAMLs. Capability inventory includes command execution via DDEV, Git, and GH. Sanitization relies on mandatory user approval before mutations.
- [COMMAND_EXECUTION]: The agent executes shell commands retrieved from workflow logs to replicate CI failures locally. This is a primary feature but constitutes a risk if log content is maliciously crafted.
- [EXTERNAL_DOWNLOADS]: The skill downloads patches and issue data from official Drupal.org and Drupal GitLab instances to assist in patch re-rolling.
Audit Metadata