vibe-implement
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands for version control (git), typechecking, and running test suites. These are standard operations for a development-focused agent and are performed within an isolated Git worktree environment.
- [EXTERNAL_DOWNLOADS]: The skill interacts with remote Git hosting services like GitHub and GitLab to push code and create pull/merge requests. These operations target well-known services and are part of the intended implementation workflow.
- [DATA_EXFILTRATION]: The workflow includes pushing implemented code to remote repositories. This behavior is the intended outcome of the implementation process and is performed using standard Git protocols.
- [PROMPT_INJECTION]: The skill processes external data in the form of specifications and tickets, which represents a potential surface for indirect prompt injection.
- Ingestion points: User-supplied specifications and tickets (SKILL.md).
- Boundary markers: The instructions do not mandate specific delimiters or "ignore previous instructions" warnings for the ticket content.
- Capability inventory: The skill can execute git commands, run local test suites, and perform network pushes to remote repositories.
- Sanitization: No specific content sanitization or filtering is described for the ingested ticket data.
Audit Metadata