bugbot
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it reads and processes arbitrary code content and diffs while possessing file-modification and command-execution capabilities.
- Ingestion points: The skill ingests untrusted data from
git diffoutput and the contents of untracked repository files during the 'Detect' phase. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands within the analyzed code are defined.
- Capability inventory: The skill can execute shell commands (
git, tests, builds, lint), write to the file system (reports), and modify source code (fix phase). - Sanitization: There is no evidence of sanitization or escaping applied to the ingested code before it is interpreted by the agent.
- [COMMAND_EXECUTION]: During the verification of repairs, the skill is instructed to run targeted tests, builds, and linters. While standard for a developer tool, this involves executing scripts defined within the project repository, which could be malicious.
Audit Metadata