build-fix
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, such as prompt injection, data exfiltration, or obfuscation, were identified within the skill or its subagent delegation instructions.
- [COMMAND_EXECUTION]: The skill is designed to execute standard project build and type-checking commands (e.g.,
tsc,mypy,cargo check) to identify errors. This is legitimate and necessary behavior for its intended purpose of fixing builds. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external tool outputs (compiler errors and linter messages). While this represents a theoretical indirect prompt injection surface where a malicious project file could influence the agent through error messages, the risk is inherent to the task and no specific exploitation patterns were found.
Audit Metadata