fix-loop
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute commands for reproducing and verifying software defects. This functionality requires executing shell commands derived from the project environment or generated during the debugging cycle.- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it processes untrusted data which could influence agent behavior.
- Ingestion points: Data is ingested from the filesystem via the Read tool and from shell command outputs (error logs) via Bash.
- Boundary markers: The skill lacks explicit instructions to treat external data as untrusted or to use delimiters that prevent the execution of instructions embedded in those data sources.
- Capability inventory: The skill possesses high-impact capabilities including file system modification via the Edit tool and command execution via the Bash tool.
- Sanitization: No sanitization or validation protocols are defined for the content extracted from files or captured from command stdout/stderr.
Audit Metadata