dyad:e2e-rebase
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from GitHub PR comments and uses it to construct shell commands. While intended for automation, this represents an attack surface where a malicious PR comment could influence agent behavior.
- Ingestion points: PR comments are fetched using the
ghCLI in step 2. - Boundary markers: No specific delimiters or instructions to ignore embedded commands within the comments are specified.
- Capability inventory: The skill executes shell commands (
npm run build,npm run e2e,git push) via the agent's environment. - Sanitization: The instructions do not specify validation or sanitization of the
<testFilename>extracted from the comments before interpolation into shell commands. - [COMMAND_EXECUTION]: The skill performs several shell-based operations including building the application and running E2E tests with the
--update-snapshotsflag. These are standard development tasks but involve executing commands based on inputs derived from external data (PR comments).
Audit Metadata