fix-this
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources, which presents an attack surface for indirect prompt injection.
- Ingestion points: Fetches pull request bodies, review findings, and issue content using the
github-facts.mjshelper andfetchSelectedReviewinadapters.ts. - Boundary markers: Utilizes structured delimiters such as
<!-- ruralnative:review-handoff:start -->and<!-- ruralnative:fix-progress:start -->to separate machine-readable state from prose. - Capability inventory: Capable of repository mutation (squash-merging, labeling, closing tickets) via the
ghCLI and performing file writes to the local checkout. - Sanitization: Implements a strict validation protocol where verification claims are cross-checked against a local
configuredCommandsallowlist, and requires execution receipts to authenticate passing status. - [COMMAND_EXECUTION]: The skill uses the
gh(GitHub) CLI tool to perform repository management operations. - Evidence: The
gh-fix-transport.tsandgithub-facts.mjsscripts usespawnSyncandexecFileSyncto executegh apicalls for merging, commenting, and updating issue states. - [EXTERNAL_DOWNLOADS]: The skill references and requires the installation of additional tools from the author's verified GitHub repository.
- Evidence:
INSTALL.mdandSKILL.mdprovide instructions to install thefix-thisandunslopifyskills from theRuralNative/RuralNative-SKILLSrepository.
Audit Metadata