fix-code
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists exclusively of markdown instructions and does not bundle any scripts or executable binaries.
- [EXTERNAL_DOWNLOADS]: The skill documentation is retrieved from the author's public GitHub repository during installation using standard tools.
- [PROMPT_INJECTION]: The skill's primary function involves reading and editing repository code, which presents a surface for indirect prompt injection.
- Ingestion points: Reads and searches files using the Read, Grep, and Glob tools (SKILL.md).
- Boundary markers: No specific delimiters are defined to isolate untrusted code content from the agent's instructions.
- Capability inventory: The agent is authorized to use Edit and Write tools to modify files in the repository.
- Sanitization: There is no explicit sanitization or validation of the code content processed by the skill.
Audit Metadata