build-fix
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to collect build/type errors using standard development tools (tsc, cargo, go vet) and apply minimal fixes. All operations are local to the repository and follow standard developer workflows.
- [COMMAND_EXECUTION]: The skill uses shell commands to run build and type-checking tools. This is the intended and necessary behavior for a build-fix skill and does not include unsafe patterns like piping remote scripts to a shell.
- [REMOTE_CODE_EXECUTION]: There are no remote code execution patterns, external downloads, or unverifiable dependencies detected.
- [DATA_EXFILTRATION]: No network operations or sensitive file access patterns are present.
- [PROMPT_INJECTION]: The skill includes instructions for agent alignment and guidance, but these are instructional rather than attempts to bypass safety filters or override core system behavior.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes project errors (external data), the capability is limited to minimal diffs and build verification, which is a common and low-risk design for developer tools.
Audit Metadata