audit-verify-explain-grade-5
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data such as code diffs, logs, and artifacts (SKILL.md). It lacks specific instructions for boundary markers or data sanitization to prevent malicious instructions embedded in these inputs from influencing agent behavior.
- [COMMAND_EXECUTION]: The workflow requires the agent to run automated tests, builds, and the application itself to verify claims. While this is the intended functionality, it involves executing potentially untrusted code from the artifacts being audited.
Audit Metadata