bug-intake
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from user-provided bug reports, logs, and stack traces which are then used to generate and execute code (tests).
- Ingestion points: Section 1 (Capture) and Section 2 (Triage) read user reports, pasted errors, and logs from the environment.
- Boundary markers: No explicit delimiters are used to separate user data from the agent's instructions.
- Capability inventory: The skill performs file writing (bug reports, tests), code execution (running tests via
execute-plan-loop), and git operations (branching and PR creation viagit-commit-organizer). - Sanitization: No sanitization or validation of the input data is performed before it is used to influence test generation.
- [DYNAMIC_EXECUTION]: The skill generates and executes automated reproduction tests at runtime based on the analysis of bug reports. While this is the primary purpose of the skill, it involves the generation of executable code derived from potentially untrusted external inputs.
Audit Metadata