defect-fix-and-regression-test
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local Python testing script (
run-tests.py) found within the repository usingpython3. This tool is used for all test claims and results verification. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from repository files to perform code fixes and write tests, creating a surface for indirect prompt injection.
- Ingestion points: The agent reads existing source code, test files, and defect-related documentation mentioned in SKILL.md.
- Boundary markers: Absent; there are no instructions to the agent to treat file contents as strictly untrusted data or to ignore embedded instructions.
- Capability inventory: The agent can modify files (applying fixes) and execute shell commands via the identified testing script.
- Sanitization: Absent; the agent is expected to process and act upon the literal content of the files without pre-processing or filtering.
Audit Metadata