error-fixer

Warn

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to recommend commands with elevated privileges (e.g., sudo chown -R $USER ~/.npm) and forceful process termination (e.g., kill -9 $(lsof -t -i:3000)) as standard fixes for permission and port conflicts.
  • [CREDENTIALS_UNSAFE]: For network and API errors (401/403), the instructions explicitly guide the agent to suggest checking .env files and verifying API keys, which targets sensitive local configuration files containing secrets.
  • [PROMPT_INJECTION]: The skill operates by ingesting and interpreting raw error messages, stack traces, and console logs provided by the user. Because this data often originates from external or third-party execution environments, it presents a surface for indirect prompt injection.
  • Ingestion points: User-supplied error messages and terminal output (SKILL.md).
  • Boundary markers: Absent; the skill does not define specific delimiters to isolate the error content from the agent's instructions.
  • Capability inventory: The skill is intended to output terminal commands and configuration changes for the user to execute.
  • Sanitization: Absent; there are no instructions to sanitize or validate the provided error text before interpretation.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 21, 2026, 05:03 AM
Security Audit — agent-trust-hub — error-fixer