fix-missing-reachability-metadata
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
./gradlew testcommands locally to identify missing metadata and verify that the fixes are successful. This is an expected and necessary part of the skill's primary function. - [PROMPT_INJECTION]: The skill processes external data in the form of build tool error messages (Indirect Prompt Injection surface).
- Ingestion points: Captures
Missing*RegistrationErrorcontent from Gradle test output inSKILL.md. - Boundary markers: None explicitly defined; the skill relies on the agent identifying specific error patterns and JSON blocks.
- Capability inventory: Includes local command execution (
./gradlew) and file writing (reachability-metadata.json). - Sanitization: The instructions guide the agent to extract only suggested JSON entries and infer conditions based on class namespaces, which limits the influence of arbitrary text in the error messages.
Audit Metadata