fix-ci-failures
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [Indirect Prompt Injection Surface]: The skill processes CI logs that may contain output from untrusted code within pull requests. This is a common requirement for debugging CI issues, though it introduces a surface where instructions could potentially be embedded in log data.
- Ingestion points: CI logs are retrieved via
gh run viewandgh apiin SKILL.md. - Boundary markers: The instructions do not define specific delimiters for separating log content from agent instructions.
- Capability inventory: The skill uses tools with write access, such as
git pushandgh run rerun(SKILL.md). - Sanitization: No specific sanitization or filtering of the log content is performed before analysis.- [Command Execution]: The skill employs standard development tools including
gitandgh(GitHub CLI) to perform its tasks. These commands are used as intended for repository management and CI interaction.- [External Data Access]: The skill accesses repository data and logs from the official GitHub API. These references target the author's own repository (microsoft/vscode), representing standard interaction with the project's infrastructure.
Audit Metadata