fixer
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to diagnose project state, including
git status,git log, andgit diff. It also instructs the agent to run project-specific build and linting commands and perform state-altering operations likegit checkoutto revert changes. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection because it processes untrusted data from the local project environment to make decisions and apply fixes.
- Ingestion points: The skill reads local project files including
CLAUDE.md,README.md,package.json, and the project's source code. - Boundary markers: No specific boundary markers or delimiters are defined to separate the ingested file content from the skill's instructions.
- Capability inventory: The skill has the capability to write to the filesystem, modify git state, and execute arbitrary build scripts defined within the project.
- Sanitization: There is no evidence of sanitization or filtering of the ingested content before it is processed by the agent.
Audit Metadata