absolute-simplify
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from the user's workspace, creating a surface for indirect prompt injection.\n
- Ingestion points: In Phase 1 (Scope Detection) and Phase 4 (Analysis), the skill reads the content of local files, staged changes, and git diffs directly into the agent's context.\n
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when interpolating file content into the prompt.\n
- Capability inventory: The skill has permissions to edit files (Phase 5) and execute shell commands for testing and linting (Phase 6), such as npm test, pytest, or go test.\n
- Sanitization: The skill does not implement any validation or sanitization of the code content before analysis, allowing any embedded instructions to reach the model.\n- [COMMAND_EXECUTION]: The skill automatically detects and executes test and linting commands from the project configuration.\n
- Evidence: Phase 6 (Auto-Verify) searches package.json, Makefile, pyproject.toml, and go.mod for commands like test, lint, and typecheck and executes them to validate changes.
Audit Metadata