skills/ilang-ai/autocode/fix-guide/Gen Agent Trust Hub

fix-guide

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted error messages during debugging, which introduces a potential surface for indirect prompt injection.\n
  • Ingestion points: Error messages and debug logs provided by the user as input for the translate_error_to_human task.\n
  • Boundary markers: The skill instructions do not utilize delimiters or specific instructions to isolate external error text from agent commands.\n
  • Capability inventory: The skill is limited to linguistic translation and text-based guidance; analysis of the SKILL.md file shows no file system, network, or command execution capabilities.\n
  • Sanitization: No input validation or sanitization logic is present to filter malicious instructions within error messages.\n- [NO_CODE]: The skill consists entirely of markdown metadata and framework-specific instruction definitions (I-Lang syntax); it does not include or deploy any executable scripts or binary files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 09:34 AM