bugfix
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from the local codebase and project configuration files which may contain malicious instructions designed to influence agent behavior.
- Ingestion points: The skill reads source code files during diagnosis and scans the .agents/rules/ directory for instructions.
- Boundary markers: There are no explicit instructions or delimiters provided to ensure the agent ignores instructions embedded within the files being analyzed.
- Capability inventory: The agent has the authority to write files (creating tests and applying fixes), execute shell commands (running validation suites, build checks, and E2E automation), and perform git commits.
- Sanitization: The skill does not describe any validation or sanitization procedures for the data ingested from the project files.
Audit Metadata