quick-implement-pr
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources which could contain malicious instructions.
- Ingestion points: Data enters the agent's context through user-provided specifications and project tickets mentioned in SKILL.md.
- Boundary markers: The skill lacks explicit boundary markers or instructions to ignore embedded commands within the ingested content.
- Capability inventory: The agent has the ability to create branches, commit code, push to remote repositories, open pull requests, and execute local test/linting suites.
- Sanitization: There are no documented sanitization or validation steps for the instructions parsed from tickets.
- [COMMAND_EXECUTION]: The skill performs shell-based operations and verification steps.
- The agent is instructed to run check suites (typechecking, linting, tests) and verify UI changes using browsers or emulators.
Audit Metadata