fix-bug
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads external data that could contain malicious instructions designed to influence the agent's actions.
- Ingestion points: Data is ingested from issue trackers using
gh issue viewandjira issue viewin Phase 1, and web results usingContext7/webfor Agent 3. - Boundary markers: The instructions do not specify the use of delimiters or explicit warnings to ignore instructions embedded in the retrieved content.
- Capability inventory: The skill uses
Bash,Edit,Write, andTaskCreatetools across the project environment as defined inSKILL.md. - Sanitization: No sanitization or safety checks are performed on the retrieved text content before it is processed by the AI.
- [COMMAND_EXECUTION]: To achieve its goals, the skill uses the
Bashtool to discover project workflows, run linting, and execute test suites vianpm,make, or other task runners. - [EXTERNAL_DOWNLOADS]: The skill interacts with external services to view issues and search the web using the
WebFetchtool and platform-specific CLIs.
Audit Metadata