deveco-autobugfix

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard shell commands for repository management, including git submodule update --init to synchronize source code and git checkout -- . to revert changes in the event of a build failure.
  • [EXTERNAL_DOWNLOADS]: The skill references the @deveco-codegenie/mcp npm package as a dependency and fetches external project resources through git submodule operations.
  • [PROMPT_INJECTION]: The instructions mandate an autonomous workflow ('全程自动执行,禁止中途等待或询问用户'), directing the agent to proceed through the fix and validation stages without pausing for user confirmation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 10:16 AM
Security Audit — agent-trust-hub — deveco-autobugfix