cy-final-verify
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of behavioral instructions and report templates designed to improve the reliability of agent work. It does not perform any network operations, unauthorized code execution, or sensitive file access.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs agents to ingest and summarize the full output of verification commands, which represents a potential surface for indirect prompt injection if a malicious process or test script generates deceptive output. 1. Ingestion points: Full command output processed during the 'READ' and 'VERIFY' steps (SKILL.md). 2. Boundary markers: None specified for the raw output ingestion. 3. Capability inventory: Standard development tools (e.g., git, make, linter). 4. Sanitization: None, as the agent is encouraged to read the full output for accuracy.
Audit Metadata