apply-findings
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it processes external findings from preceding code reviews and repository-local instructions to determine code modifications.
- Ingestion points: The skill ingests data from preceding code reviews and repository-local explicit instructions to collect findings.
- Boundary markers: The skill does not define explicit text delimiters for external findings but establishes logical boundaries by restricting auto-application to behavior-preserving, local patches.
- Capability inventory: The skill possesses the capability to modify repository files and execute project-configured shell commands for linting and testing.
- Sanitization: The skill relies on mechanical validation via existing project guards rather than sanitizing input text.
- [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands for project-configured linting and testing to validate patches.
- Evidence: Instructions require running "project-configured lint commands" and "test guards" to ensure patch safety.
- Mitigation: The skill includes a constraint to "not fall back to globally installed tools," limiting execution to verified local project configurations.
Audit Metadata