qa-bug-fixer
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data including bug reports and project documentation while maintaining capabilities like file editing and shell command execution.
- Ingestion points: External bug reports (from QA agents) and project-specific documentation (README.md, CLAUDE.md, AGENTS.md, etc.) located in the target codebase.
- Boundary markers: The instructions do not provide explicit delimiters or "ignore previous instruction" warnings to the agent for the content it reads from external files.
- Capability inventory: The skill has access to
Edit,Write, andBashtools in its environment, allowing it to modify source code and execute system commands based on its interpretation of the external data. - Sanitization: No evidence of input validation or sanitization is present for the content of bug reports or project documentation before they influence the agent's logic flow.
Audit Metadata