reconcile
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the
## Reconciliation Briefsection ofreview-NNN.mdto determine which changes to apply and which commands to run. - Ingestion points: Processes
review-NNN.mdandreview-NNN.tomlfiles. - Boundary markers: Relies on markdown headers (e.g.,
## Reconciliation Brief) to isolate data, but lacks strict sanitization to prevent the agent from following instructions embedded within the brief itself. - Capability inventory: Has the ability to perform direct file writes to project artifacts (
design.md,slice-NNN.md) and execute a variety of shell commands through thedoctrineCLI. - Sanitization: No explicit sanitization, escaping, or validation of the brief's content is described before it is used to interpolate command arguments or file content.
- [COMMAND_EXECUTION]: The skill is instructed to execute several
doctrineCLI verbs (e.g.,doctrine revision new,doctrine revision change add). These commands use parameters such as slugs, target IDs, and action types that are derived from the reconciliation brief, representing a standard command execution surface for the agent.
Audit Metadata