skills/dungsil/skills/vibe-implement/Gen Agent Trust Hub

vibe-implement

Pass

Audited by Gen Agent Trust Hub on Aug 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands for version control (git), typechecking, and running test suites. These are standard operations for a development-focused agent and are performed within an isolated Git worktree environment.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with remote Git hosting services like GitHub and GitLab to push code and create pull/merge requests. These operations target well-known services and are part of the intended implementation workflow.
  • [DATA_EXFILTRATION]: The workflow includes pushing implemented code to remote repositories. This behavior is the intended outcome of the implementation process and is performed using standard Git protocols.
  • [PROMPT_INJECTION]: The skill processes external data in the form of specifications and tickets, which represents a potential surface for indirect prompt injection.
  • Ingestion points: User-supplied specifications and tickets (SKILL.md).
  • Boundary markers: The instructions do not mandate specific delimiters or "ignore previous instructions" warnings for the ticket content.
  • Capability inventory: The skill can execute git commands, run local test suites, and perform network pushes to remote repositories.
  • Sanitization: No specific content sanitization or filtering is described for the ingested ticket data.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 7, 2026, 04:52 PM