simplify
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from task documentation (
docs/task/*.md) and modified source files, which could contain instructions designed to bypass the quality gate or manipulate the agent's output. - Ingestion points: Reads
AGENTS.md, task-specific markdown documents, and files identified via git diff (Workflow steps 1, 2, and 4). - Boundary markers: The workflow does not define specific delimiters or instructions to ignore embedded commands within the analyzed files.
- Capability inventory: The skill executes
git diff(Workflow step 3) and performs file-write operations to append findings to the task document (Workflow step 8). - Sanitization: No sanitization, escaping, or validation of the ingested content is specified.
- [COMMAND_EXECUTION]: The workflow relies on the execution of the shell command
git diff --name-onlyto identify changes in the implementation.
Audit Metadata