bugfix-quick
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a process for ingesting external bug reports and error descriptions, which introduces a potential surface for indirect prompt injection if that data contains malicious instructions.
- Ingestion points: The agent is directed to read error descriptions and source code in the 'Understand' phase.
- Boundary markers: The skill does not provide delimiters or warnings to ignore instructions embedded within the bug reports.
- Capability inventory: The agent is authorized to use tools such as Bash, Write, Edit, and Read to execute code and modify the file system.
- Sanitization: There is no requirement for the agent to sanitize or validate the external content before processing.
Audit Metadata