skills/microsoft/vscode/fixissueno/Gen Agent Trust Hub

fixissueno

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • External Content Processing: The skill is designed to fetch and analyze data from GitHub issues via the get_issue tool. This creates a potential surface for indirect prompt injection as untrusted data enters the agent context (ingestion point: SKILL.md). There are no explicit boundary markers or sanitization steps defined to delimit the external issue content from the system instructions. However, this is a standard risk for tools designed to process external user-generated content and is managed by general agent safety guardrails.
  • Agent Behavior Constraints: The instructions include a requirement for the agent to withhold its thinking process and status updates until a solution is ready. This is a specific operational instruction and does not impact the security or integrity of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 07:52 PM
Security Audit — agent-trust-hub — fixissueno