devtu-fix-tool
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to utilize standard command-line tools for development and testing, including
python3,pytest,curl, andgit. These tools are used to run integration tests (scripts/test_new_tools.py), execute unit tests, verify external API behavior, and manage the code generation process (tooluniverse.generate_tools). These operations are consistent with the skill's primary function as a debugging and fix-implementation tool. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data sources that could potentially contain untrusted instructions, such as responses from external REST APIs and error messages from test suites.
- Ingestion points: The agent is directed to inspect API responses retrieved via
curlor Python'srequestslibrary and to analyze output from test runners. - Boundary markers: The instructions do not specify explicit boundary markers or delimiters when presenting external API data to the agent for analysis.
- Capability inventory: The skill environment permits shell command execution (
python,pytest,curl,git), file system modification (JSON configs and Python source files), and tool regeneration. - Sanitization: No specific sanitization procedures are outlined for processing raw external API payloads before analysis.
Audit Metadata