qa
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard version control commands to identify scope and manage the fix-and-verify loop.
- Evidence: Use of
git diff,git status,git add, andgit commitas documented in SKILL.md Steps 1, 3, and 6. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from web applications which could potentially influence the agent's actions during the fixing phase.
- Ingestion points: External web application content accessed through browser tools or manual navigation (referenced in SKILL.md Step 4).
- Boundary markers: No delimiters or specific instructions to ignore embedded content are provided when analyzing page results.
- Capability inventory: The skill allows for source code modification and Git commits (
git add,git commit) based on findings (referenced in SKILL.md Step 6). - Sanitization: There is no mention of sanitizing or escaping web content before it is used to generate fixes.
Audit Metadata