implement
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill processes external information such as specifications and tickets to guide code implementation, which creates a surface for indirect prompt injection. \n
- Ingestion points: The skill instructions in SKILL.md direct the agent to read external specs and tickets in the 'Understand The Work' phase. \n
- Boundary markers: There are no explicit instructions or delimiters used to separate external data from system instructions. \n
- Capability inventory: The agent has the capability to modify the file system (git commit), launch subagents, and execute shell commands for testing and typechecking. \n
- Sanitization: No sanitization or validation of the ingested external content is defined.\n- [NO_CODE]: The skill consists exclusively of markdown instructions and platform configuration (SKILL.md) and does not include any executable scripts or binary files.\n- [SAFE]: The skill includes security-conscious configuration by setting 'disable-model-invocation: true' in its frontmatter, which prevents the model from recursively calling itself.
Audit Metadata