fix-repository-diagnostics
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands such as
nub run lint,nubx tsc, andbunx eslintto perform diagnostic checks and apply code fixes. These are standard development operations. - [EXTERNAL_DOWNLOADS]: The skill fetches the latest version of the
react-doctorpackage during execution via the commandnubx react-doctor@latest. This is a remote download of a well-known development tool. - [PROMPT_INJECTION]: The skill processes untrusted data from diagnostic tool outputs, creating an indirect prompt injection surface. It documents ingestion points in SKILL.md Phases 1 and 2, and mitigates risks through a mandatory verification phase (Phase 2) where the agent must confirm findings in the source code before using its file-writing capabilities in Phase 3 or further subprocess commands in Phase 4. The skill also enforces boundary markers by requiring minimal changes and adherence to repository conventions.
Audit Metadata