build-fix

Pass

Audited by Gen Agent Trust Hub on Apr 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill requires the agent to execute shell commands (e.g., npm run build, cargo build) to verify that the applied fixes resolve the reported errors.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it parses build error output which could contain malicious instructions. * Ingestion points: The skill parses full error output provided by the user or the project environment as specified in the prerequisites of SKILL.md. * Boundary markers: The instructions do not define delimiters or specific isolation patterns to separate the logs from the agent's task instructions. * Capability inventory: The skill permits the agent to modify local source files and execute arbitrary build commands. * Sanitization: There is no requirement for the skill to sanitize or validate the content of the error logs before they are processed for root cause analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 5, 2026, 08:07 PM
Security Audit — agent-trust-hub — build-fix