gate-check
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests and processes untrusted content from multiple project files.
- Ingestion points: Project artifacts from directories such as
design/,docs/,production/, andsrc/are read usingRead,Glob, andGreptools (SKILL.md). - Boundary markers: None identified. The skill does not explicitly use delimiters or instructions to ignore embedded malicious directives in the analyzed content.
- Capability inventory: The skill has access to powerful tools including
Bashfor command execution,Writefor file modification, andTaskfor spawning subagents (SKILL.md). - Sanitization: Absent. Content from project files is processed directly without escaping or validation.
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to perform local validation and administrative tasks. - Evidence: It uses
Bashto run test suites and update project status tracking files using shell redirection (SKILL.md).
Audit Metadata