coding-discipline
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to interact with codebase content and execute commands, which is a standard attack surface for indirect prompt injection. However, the skill provides clear mitigations that address this risk.\n
- Ingestion points: The agent is directed to read files, documentation, and configuration from the local workspace as part of its Read before coding and finish steps.\n
- Boundary markers: The instructions advise the agent to Identify the behavioral surface and Validate untrusted input at boundaries within the code it writes.\n
- Capability inventory: Capabilities include running formatters, linters, typecheckers, tests, and builds in Step 8.\n
- Sanitization: Step 5 explicitly mandates validation of untrusted inputs, protection against injection risks, and secret protection (Never log secrets, credentials, tokens, private keys).\n- [COMMAND_EXECUTION]: The skill explicitly directs the agent to execute relevant development tooling for code verification. This capability is central to the primary purpose of the skill and is governed by explicit principles of verification and surgical changes.
Audit Metadata