implement-patch
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from
finding.repair_scopeand repair briefs to guide the patching process. This creates a surface where malicious instructions embedded in bug reports could attempt to influence the agent's behavior. - Ingestion points: The skill processes the
finding.repair_scopefield (SKILL.md Step 1) as a repair brief. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified.
- Capability inventory: The skill can execute shell commands via
uv run, perform file system reads and writes (creating patches), and generate git commits. - Sanitization: No sanitization or validation of the input strings is mentioned.
- [COMMAND_EXECUTION]: The skill uses
uv run --no-projectto execute a local Python script (../../scripts/records.py) for validating the repair state and manifesting attempt directories. This is an intended functionality of the skill using local resources.
Audit Metadata