steady-do
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to analyze and follow instructions found in external project files, which creates a surface for malicious data to override agent behavior.
- Ingestion points: The agent is instructed to "Read project rules, README, relevant entry points and modules" in Section 1 of SKILL.md.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore potential commands embedded within these project files.
- Capability inventory: The agent has the capability to write code and execute commands, as seen in Section 3 ("implement here") and Section 5 ("smallest real execution path").
- Sanitization: There are no requirements to validate or sanitize the content of the project files before the agent acts upon the information they contain.
Audit Metadata