andrew-kane-gem-writer
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core function of processing user requirements and existing codebases to generate Ruby gem templates. \n
- Ingestion points: User instructions for gem creation, API design requests, and existing library code provided for refactoring (SKILL.md). \n
- Boundary markers: Absent; no specific delimiters or instructions to ignore embedded code commands are present. \n
- Capability inventory: Ruby code generation, template instantiation, and local test execution commands (SKILL.md, references/*.md). \n
- Sanitization: Absent; the skill provides code templates but lacks specific sanitization for processing external input code. \n- [EXTERNAL_DOWNLOADS]: The skill provides informational links to documentation and open-source repositories from community resources (ankane.org and GitHub). These are static references for educational purposes and do not involve automated script downloads or execution. \n- [COMMAND_EXECUTION]: Documents standard development workflow commands such as
bundle exec rake testandbundle installwithin the provided templates, which are appropriate for the development context.
Audit Metadata