build-fix
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute shell commands (e.g.,
npm run build,cargo build) to verify that the applied fixes resolve the reported errors. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it parses build error output which could contain malicious instructions. * Ingestion points: The skill parses full error output provided by the user or the project environment as specified in the prerequisites of SKILL.md. * Boundary markers: The instructions do not define delimiters or specific isolation patterns to separate the logs from the agent's task instructions. * Capability inventory: The skill permits the agent to modify local source files and execute arbitrary build commands. * Sanitization: There is no requirement for the skill to sanitize or validate the content of the error logs before they are processed for root cause analysis.
Audit Metadata