aiox-apply-qa-fixes
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to validate code changes within the local development environment.\n
- Evidence: Use of
npm run lint && npm run typecheck && npm testto verify fixes.\n- [DYNAMIC_EXECUTION]: The skill loads and follows instructions from a specific markdown file within the project repository.\n - Evidence: The protocol directs the agent to "Load and execute apply-qa-fixes.md" from the
.aiox-coredirectory.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from QA results and story files to determine code changes and execution steps, creating a surface for potential instruction injection.\n - Ingestion points: QA results files and the story path provided via
$ARGUMENTS[0].\n - Boundary markers: Absent; instructions do not explicitly mandate that the agent ignore embedded instructions within the ingested data.\n
- Capability inventory: The skill has the ability to write to the file system and execute shell commands through npm.\n
- Sanitization: Absent; the agent is tasked with interpreting the findings directly to perform remediation.
Audit Metadata