fix-issue
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates high security awareness by explicitly forbidding autonomous code changes. It requires the agent to present an analysis and proposed fix to the user and wait for approval before implementation.
- [DATA_EXFILTRATION]: No unauthorized data access or network exfiltration patterns were detected. The skill accesses project-specific documentation and GitHub issue details necessary for its stated debugging purpose.
- [PROMPT_INJECTION]: While the skill ingests external data from GitHub issues (untrusted input), it mitigates the risk of indirect prompt injection by enforcing a "Debug Mindset" that requires every claim to be backed by traceable
file:linecode evidence. This verification step prevents the agent from blindly following instructions embedded in issue reports. - [COMMAND_EXECUTION]: The skill uses tools like
TaskCreateandAskUserQuestionfor workflow management and user interaction, which are standard for complex task execution in this environment.
Audit Metadata