swe-method
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of instructional Markdown content defining a software engineering workflow. It does not include any functional code, shell scripts, or tool configurations that the agent would execute.
- [INDIRECT_PROMPT_INJECTION]: The guide describes a process that involves ingesting data from external sources such as Jira tickets, Slack threads, and meeting transcripts, which represents a potential attack surface for indirect prompt injection if the agent processes this data without proper boundaries.
- Ingestion points: Jira tickets, Slack threads, Session IDs, and meeting transcripts (referenced in Step 1).
- Boundary markers: Not applicable as this is a high-level process description.
- Capability inventory: Mentions interacting with codebases, APIs, databases, and CLIs (referenced in Step 3 and Step 5).
- Sanitization: No specific sanitization or filtering instructions are provided within the workflow steps.
- [SAFE]: The content is purely informational and follows standard engineering best practices for task management and requirements gathering.
Audit Metadata