Add mustache render to GitHubAgent

[CTY-git]

PR Checklist

• The commit message follows our guidelines: Code of conduct
• Tests for the changes have been added (for bug fixes / features)
• Docs have been added / updated (for bug fixes / features)
• Does this PR introduce a breaking change?
• Include PR in release notes?

PR Type

• Bugfix
• Feature
• Refactoring
• Build /CI
• Documentation
• Others

What is the current behavior?

Issue Number: N/A

What is the new behavior?

Other information

[patched-admin]

File Changed: patchwork/steps/GitHubAgent/GitHubAgent.py

Rule 1: Do not ignore potential bugs in the code

Details: Potential bug identified in error handling. The code modification introduces mustache_render without any error handling for template rendering failures or when prompt_value contains invalid data types.

Affected Code Snippet:

data = inputs.get("prompt_value", {})
task = mustache_render(inputs["task"], data)

Start Line: 17
End Line: 18

---

Rule 2: Do not overlook possible security vulnerabilities

Details: Security vulnerability identified. The use of mustache templating with unvalidated input from prompt_value could lead to template injection attacks if the input is not properly sanitized. The code should validate and sanitize the template variables before rendering.

Affected Code Snippet:

data = inputs.get("prompt_value", {})
task = mustache_render(inputs["task"], data)

Start Line: 17
End Line: 18

File Changed: patchwork/steps/GitHubAgent/typed.py

Rule 1: Do not ignore potential bugs in the code

Details: Potential bug identified due to class inheritance modification. The original GitHubAgentInputs class had optional fields (total=False), but now inherits from __GitHubAgentRequiredInputs which makes 'task' a required field. This change could break existing code that doesn't provide a 'task' parameter.

Affected Code Snippet:

class __GitHubAgentRequiredInputs(TypedDict):
    task: str

class GitHubAgentInputs(__GitHubAgentRequiredInputs, total=False):

Start Line: 6
End Line: 8

---

Rule 2: Do not overlook possible security vulnerabilities

Details: Removal of system_prompt and user_prompt fields might introduce security concerns if these fields were previously used for input validation or sanitization. The code should ensure that the prompt_value dictionary properly validates its contents since it's now the main source of prompt data.

Affected Code Snippet:

    prompt_value: Dict[str, Any]

Start Line: 9
End Line: 9