flow-pr-fix
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon data from external sources, specifically pull request discussions and CI logs, which could contain malicious instructions.
- Ingestion points: The process involves reading change request descriptions, reviews, threads, and job logs as defined in SKILL.md.
- Boundary markers: The instructions do not specify the use of explicit delimiters or instructions to ignore embedded commands when processing this external content.
- Capability inventory: The agent is authorized to read and modify local files, execute repository tests, and interact with hosting platform APIs or CLI tools.
- Sanitization: The skill includes proactive safety guidelines, such as instructing the agent to verify suggested changes against the actual code before implementation and warning that type annotations should not be trusted to validate runtime input.
Audit Metadata