modernize
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data to establish the intent of a Pull Request and guide its modernization process.
- Ingestion points: Pull Request title, body, linked issues, commits, and review threads (SKILL.md).
- Boundary markers: Absent. The skill does not define delimiters to isolate untrusted PR content from the agent's instructions.
- Capability inventory: The skill uses git tools for fetching, rebasing, and pushing, and executes "focused checks" from the repository (SKILL.md).
- Sanitization: Absent. The skill lacks validation steps for the content ingested from the PR.
- [COMMAND_EXECUTION]: The skill includes an instruction to run repository-specific checks. This creates a vector for executing untrusted code if the PR contains malicious changes to the test suite or build configuration.
Audit Metadata