fix-gh-actions
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of instructional text for a developer agent. It does not include executable scripts, shell commands, or network operations.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data such as GitHub Action logs and workflow files. While this creates a potential surface for indirect prompt injection, the provided instructions are benign and lack the implementation details (like shell execution scripts) that would be required for a direct exploit in this context.
Audit Metadata