review-epic
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill authorizes the agent to perform local checks and repository remediation, such as fixing code defects and wiring unreachable logic, without seeking explicit user confirmation for each operation.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from PRD files and external network sources, which may contain instructions that could influence the agent's behavior.
- Ingestion points: PRD files provided as arguments, codebase files, and external evidence fetched via URL.
- Boundary markers: There are no specified delimiters or instructions to prevent the agent from following commands embedded in the processed data.
- Capability inventory: The skill allows for command execution, filesystem modifications, and network fetching.
- Sanitization: The instructions do not define any sanitization or validation steps for the ingested external data.
- [DATA_EXFILTRATION]: The skill performs network operations to fetch data from arbitrary external sources to validate claims, which could be misused to transmit data or interact with malicious hosts.
Audit Metadata