fix-findings
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Communicates with official Infracost dashboard and API domains (infracost.io and coast.infracost.io) to retrieve findings and submit fix configurations.
- [COMMAND_EXECUTION]: Modifies local Infrastructure-as-Code files to implement recommended changes. This is a primary functionality of the skill and is gated by mandatory user review and confirmation.
- [PROMPT_INJECTION]: Processes external content such as code snippets and action descriptions from the Infracost API. This potential indirect prompt injection surface is addressed by a mandatory evidence chain: 1. Ingestion points: Data retrieved via the
findings_gettool (SKILL.md). 2. Boundary markers: No explicit delimiters are used for the ingested tool data. 3. Capability inventory: The skill can modify local files and initiate remote PR/ticket creation via thecreate_fixtool (SKILL.md). 4. Sanitization: All proposed actions must be reviewed and explicitly confirmed by the user before execution.
Audit Metadata