ci-auto-fix
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection due to its processing of untrusted external data in combination with system-level capabilities.\n
- Ingestion points: The skill ingests data from GitHub Action logs via
gh run view --log-failedand repository files found usingfind .github/workflows.\n - Boundary markers: No explicit delimiters or instructions are used to distinguish untrusted data from instructions or to warn the agent about embedded malicious commands.\n
- Capability inventory: The skill can execute arbitrary shell commands via
ghand other tools, modify local files, and push changes to a Git repository.\n - Sanitization: No sanitization, validation, or escaping is applied to the ingested log content or source code before it is interpreted by the agent.\n- [COMMAND_EXECUTION]: The skill uses the GitHub CLI (
gh) and standard Unix commands to perform its functions. It incorporates$ARGUMENTSinto these commands; if the platform does not ensure this input is properly escaped, it could be susceptible to command injection attacks.
Audit Metadata