submit-fix
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI (
gh) and Git shell commands to perform automated tasks including branch creation, staging changes, committing, and submitting pull requests. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its reliance on data from an external local file to drive its execution logic. * Ingestion points: Reads issue context and instructions from
.ai/issue-analysis-<issue_number>.md. * Boundary markers: The skill lacks delimiters or explicit instructions to ignore potentially malicious commands embedded in the issue analysis file. * Capability inventory: The agent has the ability to write to the file system (creating reports) and execute shell commands (git and gh). * Sanitization: There is no evidence of sanitization, filtering, or validation of the content read from the input file before it influences agent behavior.
Audit Metadata