bug-report
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted data from external sources. 1. Ingestion points: The skill reads user-provided bug descriptions and performs automated analysis on arbitrary source code files provided as arguments. 2. Boundary markers: There are no explicit delimiters or instructions to treat ingested content as data rather than instructions. 3. Capability inventory: The skill has the authority to write to the filesystem, edit files, and execute shell commands through the Bash tool. 4. Sanitization: No explicit sanitization or filtering of external content is specified.
- [DYNAMIC_CONTEXT_INJECTION]: The skill employs a load-time shell command via the exclamation-backtick syntax to resolve automation settings. This command targets a local helper script within the project's .claude directory to retrieve configuration values.
- [COMMAND_EXECUTION]: The skill uses the Bash tool for configuration resolution and for running project-defined test commands. These executions are constrained to specific local scripts or commands found in the project's configuration file.
Audit Metadata