cursor-loop-on-ci
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes external CI log data, which creates a surface for potential indirect prompt injection attacks.\n
- Ingestion points: In
SKILL.md, the commandsgh pr checksandgh run view --log-failedare used to retrieve status and log data from external GitHub Actions runs.\n - Boundary markers: The skill includes a 'Codex publication boundary' in
SKILL.mdthat requires authorization for external writes, providing a process-level boundary, although it lacks technical string delimiters for the ingested content.\n - Capability inventory: The agent is tasked with fixing code failures, which involves file editing and potentially executing
git pushto resolve CI issues.\n - Sanitization: No explicit instructions are provided to sanitize or filter the log output before it is processed by the AI.\n- [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI (
gh) to retrieve pull request and CI status information.\n - Evidence: Standard commands like
gh pr view,gh pr checks, andgh run vieware documented inSKILL.mdto facilitate the CI fix-loop workflow.\n - Context: The
MIRROR.mdfile indicates the skill was originally sourced from the Cursor plugins repository on GitHub.
Audit Metadata