aidlc-master
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The
SKILL.mdfile contains instructions stating that the workflow "OVERRIDES the agent's default development behavior" once activated. This is a workflow steering mechanism intended to enforce the AI-DLC methodology. - [COMMAND_EXECUTION]: The skill includes a maintenance script
scripts/check-upstream.shthat executes shell commands such asgit,diff,tar, andmktemp. These are used by the developer or agent to verify and sync reference files with the upstream repository. - [EXTERNAL_DOWNLOADS]: The skill contains a script for fetching data from the official AWS Labs GitHub repository (
https://github.com/awslabs/aidlc-workflows.git). This is a well-known and trusted source. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external user-provided documents (Vision and Technical Environment) to drive the inception and construction phases. This creates a surface where embedded instructions in those files could influence the agent's behavior.
- Ingestion points: User-supplied vision and technical environment documents (templates in
references/inputs/). - Boundary markers: The skill employs mandatory human approval gates ("Wait for Explicit Approval") and maintains an append-only
audit.mdlog to track all user interactions and decisions. - Capability inventory: The agent has capabilities to write files to the workspace and execute shell scripts.
- Sanitization: No specific content sanitization or XML tagging is described for the ingestion of these external documents.
Audit Metadata