correct
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and process data from external, potentially untrusted sources to identify and fix code patterns.
- Ingestion points: The agent is instructed to read recent commits, reverts, review comments, and agent instruction files (SKILL.md).
- Boundary markers: None; the instructions do not provide delimiters or guidance to distinguish between data and instructions within the analyzed history.
- Capability inventory: The skill prompts for repository modifications, including deleting code, changing architecture, and adding CI/lint checks (SKILL.md).
- Sanitization: None; there is no mention of filtering or validating the content of the commits or comments before processing them.
Audit Metadata