bugfix-crate
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from an external findings file provided by the user via the
issues_fileargument (SKILL.md). - Ingestion points: The agent reads the entire issue file to establish a baseline and determine resolution paths for each finding.
- Boundary markers: The instructions do not specify any delimiters or boundary markers to distinguish between data and potential instructions within the findings file.
- Capability inventory: The skill has access to powerful tools including
Bash,Write, andEdit, enabling it to modify the local filesystem and execute shell commands. - Sanitization: There is no mention of sanitizing or validating the contents of the issue file before the agent uses it to influence its coding and testing actions.
- [DYNAMIC_EXECUTION]: The skill compiles and runs local code as part of its core loop (
SKILL.md). - Execution method: It invokes
cargo testandcargo clippy, which result in the compilation and execution of the Rust crate's source and test code. - Context: This execution is restricted to the local environment and is the intended primary purpose of the skill's repair workflow.
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to run command-line interface operations (SKILL.md). - Commands: Specifically, it executes
cargo test -p <crate>andcargo clippy -p <crate> -- -D warningsto verify fixes and ensure code quality.
Audit Metadata