lint-rule-development
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to read various files within the repository to guide its development tasks, which introduces a potential surface for indirect instructions to influence agent behavior.
- Ingestion points: The agent is instructed to read
crates/biome_analyze/CONTRIBUTING.md, existing rule implementations incrates/biome_*_analyze/src/lint/, and test fixtures. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the skill.
- Capability inventory: The skill leverages the
justtask runner for code generation and testing, and accesses various project-specific metadata. - Sanitization: Content from the repository is ingested and used for context without explicit sanitization or validation logic.
- [COMMAND_EXECUTION]: The skill uses a local task runner to automate development processes.
- Evidence: It invokes several
justcommands such asjust new-js-lintrule,just test-lintrule,just gen-rules, andjust gen-configurationto scaffold code and run tests within the Biome development environment.
Audit Metadata