implement-task
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests content from external task files and project documentation which could potentially contain instructions that influence the agent's behavior.
- Ingestion points: Processes files within
docs/planning/tasks/,docs/specifications/product.md,AGENTS.md, andCONTEXT.md(SKILL.md). - Boundary markers: Absent; there are no instructions for the agent to treat data from these files as untrusted or to use specific delimiters.
- Capability inventory: The skill allows the agent to modify the filesystem and execute shell commands for testing, linting, building, and database migrations (SKILL.md).
- Sanitization: Absent; the skill does not define methods for validating or sanitizing the content within the ingested markdown files before performing actions based on them.
Audit Metadata