crafting-self-prompting-loops
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The document
references/failure-modes.mdcontains common prompt injection patterns such as "ignore previous instructions". This text is part of a catalog of failure modes and is used for educational and defensive design purposes rather than as an attempt to hijack the agent.\n- [COMMAND_EXECUTION]: The scriptsassets/contract_check.pyandeval/run_eval.pyuse the Pythonsubprocessmodule to execute system commands. This is primarily used for environment validation and interacting with Git for contract and grant verification.\n- [DYNAMIC_EXECUTION]: Thecontract_check.pyscript is designed to execute shell commands extracted from theassertionsfield of JSON 'envelope' files. While this creates a dynamic execution surface, the skill instructions specifically direct the agent to list these commands and wait for user confirmation before proceeding with execution.
Audit Metadata