fix-issue
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrustworthy input from external GitHub issue descriptions using the
gh issue viewcommand. This represents an indirect prompt injection surface where a malicious issue author could attempt to influence the agent's behavior. However, the workflow's requirement for manual test reproduction and verification significantly mitigates this risk. - Ingestion points: Issue content retrieved by
gh issue view(SKILL.md). - Boundary markers: None specified.
- Capability inventory: File system modification, shell command execution (git, gh, pytest).
- Sanitization: No explicit content sanitization is mentioned.
- [COMMAND_EXECUTION]: The skill utilizes standard developer tools including
git,gh, andpytest. These commands are scoped to the development task and the authored repository, representing normal functionality for a coding agent.
Audit Metadata