fix-hard
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill incorporates user-provided issue descriptions through the
$ARGUMENTSvariable within<issues>tags. This creates an attack surface for indirect prompt injection, where malicious instructions could be embedded within bug reports or feature requests to manipulate the agent's logic.\n - Ingestion points: The
$ARGUMENTSvariable inSKILL.mdreceives external input inside the<issues>XML-style block.\n - Boundary markers: The input is delimited by
<issues>and</issues>tags.\n - Capability inventory: The skill utilizes tools for filesystem modifications (via
/code), git repository management (viagit-manager), and interactive user querying (viaAskUserQuestion).\n - Sanitization: While no explicit input filtering is mentioned, the skill mandates a 'Confidence & Evidence Gate' requiring 80%+ confidence and specific
file:lineproof before acting, which provides a procedural check against unverified instructions.\n- [COMMAND_EXECUTION]: The skill's workflow depends on executing commands and code via specialized tools and subagents (e.g.,/code,/prove-fix, and various subagents) to research, plan, and implement fixes within the development environment.
Audit Metadata