specify
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands to manage a git repository, including
git fetch --all --prune,git ls-remote,git branch, and implicitlygit checkoutto create feature-specific branches. - [EXTERNAL_DOWNLOADS]: The skill performs network operations via
git fetchandgit ls-remoteto synchronize with the remote origin. These operations target the project's configured git hosting service, which is generally considered a well-known service. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input to drive core logic and command generation.
- Ingestion points: Natural language feature descriptions are ingested via the
$ARGUMENTSvariable inSKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the ingestion process.
- Capability inventory: The skill possesses the ability to execute shell commands (
git) and perform file system writes (specs/andchecklists/directories). - Sanitization: There is no evidence of sanitization or validation performed on the user-provided text before it is used to generate keywords for branch names or content for the specification files.
Audit Metadata