build-fix

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, such as prompt injection, data exfiltration, or obfuscation, were identified within the skill or its subagent delegation instructions.
  • [COMMAND_EXECUTION]: The skill is designed to execute standard project build and type-checking commands (e.g., tsc, mypy, cargo check) to identify errors. This is legitimate and necessary behavior for its intended purpose of fixing builds.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external tool outputs (compiler errors and linter messages). While this represents a theoretical indirect prompt injection surface where a malicious project file could influence the agent through error messages, the risk is inherent to the task and no specific exploitation patterns were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 10:48 PM
Security Audit — agent-trust-hub — build-fix