plan-implement-verify-recover
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it is designed to read and follow instructions from potentially untrusted files within a repository. * Ingestion points: The agent reads 'AGENTS.md', repository-specific instructions, and existing code files. * Boundary markers: There are no defined delimiters or instructions to ignore malicious directives embedded within the repository data. * Capability inventory: The skill utilizes shell commands for building, testing, linting, and validating code changes. * Sanitization: The instructions do not specify any sanitization or validation of the content read from external repository files.
- [COMMAND_EXECUTION]: The skill facilitates the execution of arbitrary shell commands provided by the repository's build and test systems. While intended for legitimate development tasks, this provides a mechanism for executing malicious code if the repository configuration is compromised.
- [SAFE]: The skill includes a 'Safe Implementation Principle' (Principle 10 in SKILL.md) that explicitly instructs the agent not to hardcode credentials, environment values, or URLs, which is a recommended security practice.
Audit Metadata