pr-fix
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data from external sources and has significant write capabilities.
- Ingestion points: Pull request comments fetched via
gh apiand CI failure logs retrieved viagh run viewinSKILL.md. - Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the fetched data.
- Capability inventory: The agent can modify project files, execute
git commit,git pushchanges to the origin, and post API replies. - Sanitization: The skill lacks sanitization, validation, or filtering of the content retrieved from GitHub before processing it for code fixes.
Audit Metadata