project-acceptance
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute shell commands for Git operations (status, diff, add, commit) and project verification tools including tests, builds, and linters.
- [PROMPT_INJECTION]: Analysis of the Indirect Prompt Injection (Category 8) vulnerability surface: 1. Ingestion points: The agent reads Git differences, untracked files, and project requirements from the local workspace (File: SKILL.md). 2. Boundary markers: Absent; there are no specific instructions to use delimiters for the ingested code content. 3. Capability inventory: The agent has the capability to delete files (cleanup), stage/commit changes, and execute arbitrary build/test commands (File: SKILL.md). 4. Sanitization: Absent; the skill relies on the agent's internal logic for parsing file content without explicit sanitization steps. This surface is consistent with standard development tool functionality.
Audit Metadata