deveco-autobugfix
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard shell commands for repository management, including
git submodule update --initto synchronize source code andgit checkout -- .to revert changes in the event of a build failure. - [EXTERNAL_DOWNLOADS]: The skill references the
@deveco-codegenie/mcpnpm package as a dependency and fetches external project resources through git submodule operations. - [PROMPT_INJECTION]: The instructions mandate an autonomous workflow ('全程自动执行,禁止中途等待或询问用户'), directing the agent to proceed through the fix and validation stages without pausing for user confirmation.
Audit Metadata