forge-fix
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown instructions (SKILL.md) and does not include any executable scripts, binaries, or configuration files that could perform unauthorized actions.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process data (design violations) which constitutes a theoretical injection surface.
- Ingestion points: Reads violations found by
/forge-audit(referenced in SKILL.md). - Boundary markers: None explicitly defined in the prompt text.
- Capability inventory: The skill instructs the agent to replace values in files, but explicitly requires user confirmation before writing any changes.
- Sanitization: None specified for the input data processing.
Audit Metadata