vibe-coding-build
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific documentation to guide its behavior, creating an indirect prompt injection surface.\n
- Ingestion points: The skill reads from
IMPLEMENTATION_PLAN.md,PRD.md,progress.txt,TECH_STACK.md,DESIGN_SYSTEM.md,FRONTEND_GUIDELINES.md, andBACKEND_STRUCTURE.mdas outlined inSKILL.mdandreferences/session-startup.md.\n - Boundary markers: The skill requires an implementation plan to be written to
tasks/todo.mdand verified by the user before code is written, as described inreferences/planning.md. It also treats the documentation suite as a locked authority to prevent unauthorized deviations.\n - Capability inventory: The skill possesses file system access for creating and modifying code, and uses specialized tools like
vibe-coding-cli-runnerfor executing development commands as shown inSKILL.md.\n - Sanitization: Mandatory code reviews via
vibe-coding-code-reviewand specific testing requirements inreferences/engineering-standards.mdserve as safety checkpoints to validate the integrity of the output.\n- [COMMAND_EXECUTION]: The skill utilizes a specialized tool to perform necessary development tasks.\n - Evidence: The
vibe-coding-cli-runnertool is invoked for CLI-driven tasks such as migrations, code generation, and scaffolding during the step execution phase inSKILL.md. This is a legitimate development capability managed through the agent's tool-execution interface and scoped to the build process.
Audit Metadata