w-build
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and follow instructions from repository files, including READMEs, scripts, and PRODUCT.md, which are untrusted external data sources.
- Ingestion points: The agent reads repository instructions, affected README/scripts, and technical docs in the root instructions and step 1.
- Boundary markers: There are no explicit boundary markers or instructions to ignore potential commands embedded within the documentation it reads.
- Capability inventory: The agent has the capability to modify files in the working tree and execute shell commands for code generation and testing.
- Sanitization: No sanitization or validation of the content read from the repository files is specified.
- [COMMAND_EXECUTION]: The skill directs the agent to execute shell commands to verify changes and run code generators.
- Evidence: Steps 2 and 3 instruct the agent to "run documented generators" and "run the smallest existing check," which involves executing code and test suites within the local environment.
Audit Metadata