implement-suggestion
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes external, untrusted input through the
$ARGUMENTSvariable and potentially through GitHub PR comments fetched from a URL without implementing security boundaries or sanitization. An attacker could craft a review comment containing instructions to override the agent's behavior, leading to unauthorized code modifications or information disclosure during the 'implement-suggestion' process. - Ingestion points: The
$ARGUMENTSvariable inSKILL.mdreceives direct user input or content from external review comments. - Boundary markers: Absent. The input is interpolated directly into the prompt without delimiters (e.g., XML tags or triple backticks) or instructions to ignore embedded commands.
- Capability inventory: The skill is designed to 'Implement fixes', which implies the use of file-writing or code-editing tools to modify the project's source code.
- Sanitization: Absent. There is no evidence of input validation, escaping, or filtering of the content provided in
$ARGUMENTSbefore it is processed by the agent.
Audit Metadata