fix-finding
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external codebases and security report data, which constitutes an attack surface for indirect prompt injection.
- Ingestion points: Processes source code, direct callers, shared helpers, relevant tests, and security findings (SKILL.md).
- Boundary markers: Explicitly instructs the agent to treat all ingested code and policy files as untrusted data.
- Capability inventory: Utilizes tools for code patching (
patch), task delegation (delegate_task), and security record management (security_scan_record_validations,security_scan_get). - Sanitization: Requires verification of attack paths, invariant checks, and prohibits the use of real credentials or production data during the fix process.
Audit Metadata