fix
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard software development tools such as
git,gh(GitHub CLI),npm, and Python testing frameworks (ruff,mypy,pytest). All commands are contextually appropriate for the stated purpose of bug fixing and are executed in a transparent manner. - [PROMPT_INJECTION]: The skill identifies a potential indirect prompt injection surface through the ingestion of external GitHub issue data via
gh issue view. To mitigate this, the workflow includes a mandatory security scan (/security-verify scan) and a required manual review (/review changes) before any code is committed or pushed. The use of quoted heredocs (cat <<'EOF') for commit messages further demonstrates a secure approach to handling multi-line text input by preventing unintended shell expansion.
Audit Metadata