implement
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes external specifications or tickets to perform implementation tasks, which presents an indirect prompt injection surface. A malicious specification could contain embedded instructions designed to influence the agent's code generation, testing, or git operations.
- Ingestion points: User-provided implementation specifications and tickets (SKILL.md).
- Boundary markers: Absent; there are no instructions to treat external data as untrusted or to use delimiters to prevent command confusion.
- Capability inventory: File modification (implementation), shell command execution (typecheck and test suites), and version control operations (git commit) (SKILL.md).
- Sanitization: Absent; the instructions do not specify any validation or filtering of the input data before it is acted upon.
Audit Metadata