implement
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted input from external sources like specs and tickets, creating an attack surface for indirect prompt injection.
- Ingestion points: Data enters the agent context from 'spec' or 'tickets' as mentioned in SKILL.md.
- Boundary markers: The instructions lack delimiters or safety warnings to ignore instructions embedded in the input data.
- Capability inventory: The skill enables the agent to execute shell commands for tests and type checking, and to perform git operations as described in SKILL.md.
- Sanitization: No input validation or sanitization of the ticket content is specified before the agent acts upon it.
Audit Metadata