fix-ci
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes log data from external sources which could contain malicious instructions.
- Ingestion points: Pull Request check logs and external check URLs (SKILL.md).
- Boundary markers: Not present; the agent processes raw log output directly without delimiters.
- Capability inventory: File system write operations for applying fixes and code pushing via git (SKILL.md).
- Sanitization: Absent; no logic is provided to filter or escape the ingested log data before processing.
Audit Metadata