apiiro-fix
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
apiiroCLI to execute remediation workflows and queries. Specifically, it callsapiiro risks remediateto fetch fix prompts andapiiro guardian queryfor AI-based remediation advice. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it processes output from the Apiiro CLI and instructs the agent to apply it directly to the repository.
- Ingestion points: Output from the
apiiro risks remediateandapiiro guardian querycommands is ingested by the agent for action. - Boundary markers: No explicit delimiters or boundary instructions are provided to the agent to treat the CLI output as untrusted data.
- Capability inventory: The agent is granted the capability to modify repository code based on the suggestions provided by the tool output.
- Sanitization: The skill relies on the integrity of the Apiiro platform's responses to ensure that the suggested remediation actions are safe.
Audit Metadata