landing
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides the ability to execute arbitrary shell commands via the
slotcommand and pre-configured repository check and rebuild scripts. This is the primary function of the tool for orchestrating development workflows. - Evidence:
scripts/land.py(slot command handling),scripts/landing_lib/_governor/build.py(run_build function), andscripts/landing_lib/_queue/integration.py(rebuild and check methods). - [DYNAMIC_EXECUTION]: The main script
scripts/land.pyuses a custom module loading system that manipulatessys.modulesand usestypes.ModuleTypeto dynamically load its internal libraries from relative paths. This is implemented for namespace isolation. - Evidence: Initial initialization block in
scripts/land.py. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from git commit logs and pull request descriptions. This data is processed and used to populate PR titles and bodies, which creates a potential surface for indirect prompt injection if an agent interprets this metadata as instructions.
- Evidence: Ingestion points in
scripts/landing_lib/store.py(pr_body function) and capability inventory involving subprocess execution and GitHub CLI operations. No LLM-specific sanitization or boundary markers are employed for this external content.
Audit Metadata