bug-fix-protocol
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of instructional markdown and does not contain any executable scripts, binaries, or hardcoded credentials.
- [PROMPT_INJECTION]: The skill is designed to process external bug reports, which are untrusted data sources. This creates a surface for indirect prompt injection, as the agent is instructed to reproduce behavior and write code based on the content of these reports.
- Ingestion points: The 'Inputs' section of SKILL.md defines bug reports as the primary input.
- Boundary markers: Absent; there are no instructions to use delimiters or ignore instructions embedded within the bug report.
- Capability inventory: The agent is expected to write and execute tests and modify source code (Workflow steps 2, 4, and 5).
- Sanitization: Absent; no input validation or sanitization of the bug report content is prescribed.
Audit Metadata