design
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the local development environment via the
doctrinecommand-line utility, specifically using subcommands likedesign start,design resume, andslice statusto manage design fragments and revisions.\n- [INDIRECT_PROMPT_INJECTION]: The instructions explicitly direct the agent to treat the output of thedoctrine designcommand as its active instruction set ("that output is your instruction: read it and do what it says"). This creates an indirect injection surface.\n - Ingestion points: Output generated by the
doctrineCLI tool (SKILL.md).\n - Boundary markers: Absent; the skill lacks specific delimiters to distinguish between tool data and instruction context.\n
- Capability inventory: The agent can execute
doctrineCLI commands and navigate to other functional routes such as/planand/knowledge.\n - Sanitization: Absent; there is no evidence of filtering or validation of the tool's output before the agent follows its instructions.
Audit Metadata