workflow-fix-and-ship
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon data from external sources (Sentry and Supabase logs), which represents a vulnerability surface where malicious instructions could be embedded in log messages to influence agent behavior.\n
- Ingestion points: Data enters the context through
sentry:search_issuesandsupabase:get_logstool calls described in the Phase 1: Triage section of SKILL.md.\n - Boundary markers: The skill does not define specific delimiters or instructions to treat log data as untrusted or to ignore embedded instructions within that data.\n
- Capability inventory: The workflow grants the agent authority to perform surgical code changes, execute automated tests via the
test-playwrightskill, and create Pull Requests via theworkflow-prskill.\n - Sanitization: There are no mentioned mechanisms for sanitizing, escaping, or validating the content of logs before they are processed for root cause analysis.
Audit Metadata