batch

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill coordinates the execution of project-defined test suites (e.g., npm test, pytest) and building processes across multiple background agents. It also utilizes the GitHub CLI (gh) to push branches and submit pull requests.- [EXTERNAL_DOWNLOADS]: The skill interacts with GitHub for code management and pull request creation, which involves network communication with a well-known service.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it reads and processes arbitrary codebase content and user-provided arguments to dynamically generate prompts for subagents without applying sanitization or clear boundary delimiters.
  • Ingestion points: Data enters the agent's context through user instructions ($ARGUMENTS) and the automated research of codebase files in Phase 1.
  • Boundary markers: The skill does not use explicit delimiters or instructions to isolate untrusted data from the core system prompt within the worker instructions.
  • Capability inventory: The skill possesses the capability to spawn background agents, execute shell commands (tests and git operations), and perform file system writes.
  • Sanitization: No sanitization, filtering, or validation is performed on the content retrieved from the codebase before it is interpolated into instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 12:42 PM
Security Audit — agent-trust-hub — batch