team-polish
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONPROMPT_INJECTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses dynamic context injection to execute a shell script (
yaml-helper.sh) at load time. This is used to resolve configuration settings such asreview_modeandteam.sizefrom the project environment. - [PROMPT_INJECTION]: The instructions explicitly direct the agent to bypass the 'Collaboration Protocol'—a standard requirement for user confirmation before writing files. The skill defines a 'bounded exception' allowing sub-agents to write new artifacts to
production/,docs/, ortests/without individual prompts, provided the phase itself was approved. - [INDIRECT_PROMPT_INJECTION]: The skill takes user input describing a feature or area and propagates it to sub-agents, creating an attack surface for indirect injection.
- Ingestion points: Skill argument
[feature or area to polish]inSKILL.md. - Boundary markers: Absent; user input is interpolated into briefs without delimiters.
- Capability inventory: The pipeline uses
Agent,Bash,Write, andEdittools. - Sanitization: No input validation or sanitization is performed on the user-provided string.
- [COMMAND_EXECUTION]: The skill performs command execution via the
Bashtool and orchestrates multiple sub-agents to carry out profiling, testing, and implementation tasks. Note that theBashtool usage is restricted in the frontmatter to a specific script and command.
Audit Metadata