execute
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local command-line interface tool,
doctrine, to manage development lifecycle tasks such as starting slices, advancing phases, and performing Git worktree operations (forking, landing, and cleanup). It also runscargo clippyto ensure code quality. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and acts upon content from external files that could be influenced by an attacker.
- Ingestion points:
SKILL.mdreferences reading fromstate/.../phases/phase-NN.md,plan.toml,plan.md,design.md,slice-nnn.md, andusing-doctrine.md. - Boundary markers: Absent. There are no instructions to use delimiters or ignore embedded instructions within the ingested files.
- Capability inventory: The skill can execute shell commands via the
doctrineandcargotools and perform file system and memory operations. - Sanitization: Absent. The skill does not perform any validation or escaping of the content read from the project files before processing.
Audit Metadata