clawpatch-bugs
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a sequence of shell commands to manage a bug-hunting workspace and generate reports. This includes
rm -rf .clawpatchfor cleanup,mkdirfor directory creation, and theclawpatchtool suite (init,map,review,report). These operations are consistent with the skill's documented purpose. - [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection by ingesting data from external tool outputs and passing it to subagents for analysis.
- Ingestion points:
SKILL.md(Step 2) reads results fromdocs/bugs/${DATE}-bugs.md. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when interpolating tool output into subagent prompts.
- Capability inventory: The subagents are granted file-read capabilities via the
Exploretool to verify bug findings. - Sanitization: No sanitization or validation of the ingested
clawpatchoutput is performed before it is passed to the subagents.
Audit Metadata