fix-ci
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted external data to guide its actions, creating a surface for indirect prompt injection.
- Ingestion points: The workflow retrieves data from
gh pr checksoutput, GitHub Actions logs, and external check links (file: SKILL.md). - Boundary markers: The instructions do not specify any delimiters or safety warnings to ignore instructions embedded within the logs or check metadata.
- Capability inventory: The agent has the ability to execute
ghCLI commands, modify files to apply fixes, and push changes to the repository. - Sanitization: There is no mention of filtering, escaping, or validating the content retrieved from external logs before it is used to determine the necessary code changes.
Audit Metadata