contributing
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill provides instructions to execute project-specific scripts like ./local-env-setup.sh and ./start-build-env.sh, along with ./gradlew build tasks. These are standard procedures for contributors to set up their development environment and run test suites.
- Indirect Prompt Injection Surface: The skill involves ingesting data from external sources like GitHub issues and pull requests (SKILL.md). While it lacks explicit boundary markers or sanitization for this content, the capabilities are restricted to standard development commands (gradlew, setup scripts), making the potential for misuse within the intended workflow low.
Audit Metadata