github-fix-action-error
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data in the form of GitHub Action CI logs which could be manipulated by an attacker to include malicious instructions.
- Ingestion points: CI logs are retrieved and analyzed using
gh run view --login Step 3. - Boundary markers: The skill does not use specific delimiters or instructions to prevent the agent from obeying instructions hidden within the logs.
- Capability inventory: The skill has extensive capabilities including shell command execution (
Bash), file editing (Edit,Write), and the ability to push code to a remote repository (git push). - Sanitization: No sanitization is performed on the log content before the agent interprets it to diagnose errors or determine fixes.
- [COMMAND_EXECUTION]: The skill dynamically identifies and executes shell commands for verification and fixing based on the repository context (e.g.,
npx tsc,cargo check,eslint --fix). These commands are triggered by the analysis of external CI logs and local file content.
Audit Metadata