skills/davidlee/doctrine/execute/Gen Agent Trust Hub

execute

Pass

Audited by Gen Agent Trust Hub on Jul 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a local command-line interface tool, doctrine, to manage development lifecycle tasks such as starting slices, advancing phases, and performing Git worktree operations (forking, landing, and cleanup). It also runs cargo clippy to ensure code quality.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and acts upon content from external files that could be influenced by an attacker.
  • Ingestion points: SKILL.md references reading from state/.../phases/phase-NN.md, plan.toml, plan.md, design.md, slice-nnn.md, and using-doctrine.md.
  • Boundary markers: Absent. There are no instructions to use delimiters or ignore embedded instructions within the ingested files.
  • Capability inventory: The skill can execute shell commands via the doctrine and cargo tools and perform file system and memory operations.
  • Sanitization: Absent. The skill does not perform any validation or escaping of the content read from the project files before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 25, 2026, 01:12 PM
Security Audit — agent-trust-hub — execute