logic-fix-all
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local shell commands such as
git(e.g.,git ls-files,git rev-parse,git diff,git checkout) andfindto perform repository enumeration, file count estimation, and verification of applied code changes. These are standard development tools and are used appropriately within the scope of the skill's defined autonomous process. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it is designed to autonomously ingest and analyze the entire content of a repository (source code, configuration files, and documentation) to generate and apply code fixes. Maliciously crafted instructions embedded in these files (e.g., in comments or string literals) could potentially influence the agent's logic-tracing and remediation steps.
- Ingestion points: Reads all runtime-affecting repository files during Phase 1 (Scope Enumeration) and Phase 3 (Deep Review).
- Boundary markers: The instructions do not define specific delimiters or "ignore instructions" warnings for the content extracted from repository files.
- Capability inventory: The skill has the capability to write to the file system and execute shell commands for repository state management.
- Sanitization: No explicit sanitization or filtering of instructions contained within the ingested repository data is implemented.
Audit Metadata