design-sync
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes shell commands at load time (e.g.,
ls,git log,go list) to inject the current project state into the agent's context. These commands are restricted to the project directory and are used for documentation analysis purposes. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the
DESIGN.mdfile and source code in theinternal/directory, which could potentially contain malicious instructions. - Ingestion points: Contents of
DESIGN.mdandinternal/directory files. - Boundary markers: None present.
- Capability inventory: Read-only operations including
grep,sed,head,wc,git, andgo list. The skill lacks file-write, network, or privilege escalation capabilities. - Sanitization: None present.
Audit Metadata