skills/cycleuser/skills/power-iterate/Gen Agent Trust Hub

power-iterate

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The autonomous execution loop outlined in rules/autonomous-loop.md directs the agent to run shell commands for syntax validation (e.g., python -m py_compile) and execute core functions without user review.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts and processes potentially untrusted task descriptions as input for its autonomous development cycle. While it employs an assumption-tagging mechanism ([假设]), it lacks robust sanitization for interpolated data.
  • Ingestion points: SKILL.md (Phase 1: Autonomous Understanding of user input).
  • Boundary markers: The skill uses assumption tags but does not provide explicit 'ignore embedded instructions' delimiters for the processed task content.
  • Capability inventory: Full file system write access, shell command execution for validation, and the ability to define/install dependencies.
  • Sanitization: Absent; the skill relies on internal budget checks rather than input validation.
  • [DYNAMIC_EXECUTION]: The skill's primary function is the continuous generation and execution of code across multiple iterations. This automated 'generate-test-fix' cycle operates without human-in-the-loop checkpoints.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 06:13 AM