fix-the-issue
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes content from GitHub issues which are controlled by external users.
- Ingestion points: The skill body in SKILL.md describes a workflow for "Investigating and resolving an existing GitHub issue" and "reproduce (re-generate) the problem reported in the GitHub issue".
- Boundary markers: There are no explicit instructions to the agent to treat issue content as data rather than instructions, nor are there delimiters provided.
- Capability inventory: The agent is authorized to execute shell commands for git operations and project build/test scripts (npm, bun, poetry, etc.).
- Sanitization: No sanitization or filtering of the issue text is implemented before processing.
- [COMMAND_EXECUTION]: The skill utilizes shell commands for environment inspection, branching strategy, and verification of builds/tests. These are limited to project-standard tooling and follow best practices such as avoiding direct main-branch modifications and automatic commits.
Audit Metadata