implement
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data in the form of specifications and tickets mentioned in the instructions. This creates a surface for indirect prompt injection attacks.
- Ingestion points: The skill processes work described by the user in a "spec or set of tickets".
- Boundary markers: There are no markers or delimiters defined to isolate untrusted ticket content or instructions to ignore embedded commands.
- Capability inventory: The skill triggers command execution via typecheckers and test suites, and performs file system writes through git commits.
- Sanitization: There is no evidence of sanitization or validation of the input data before it influences the agent's actions.
- [COMMAND_EXECUTION]: The skill is designed to run typechecking and test commands regularly. This represents a functional capability that could be misused if a malicious specification induces the agent to run dangerous code masked as tests.
Audit Metadata