anti-slop-migration
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes output from static analysis tools and reads local rule definitions to guide code modifications, which creates a potential surface for indirect instructions to influence the agent. (1) Ingestion points: The agent reads JSON output from
oxlintcommands and rule implementation files located intools/oxlint/anti-slop/rules/. (2) Boundary markers: No explicit delimiters or boundary instructions are present to distinguish tool output from agent instructions. (3) Capability inventory: The skill uses shell command execution viabunxandbun runas well as file system access for code modification. (4) Sanitization: No specific validation or sanitization of tool output is performed before it is processed by the agent. - [COMMAND_EXECUTION]: The skill uses shell commands to interact with the repository, including linting, type-checking, and running tests. Evidence: Instructions include running
bunx oxlint,bunx tsc, and variousbun runcommands to verify the migration progress.
Audit Metadata