solo-build
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_CONTEXT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to execute a variety of development-related shell commands and tools, including
git,make,pnpm,npm,uv,xcodebuild, andadb. It specifically favors usingmaketargets for tasks like testing, linting, and building if a Makefile is present in the project root.\n- [INDIRECT_PROMPT_INJECTION]: The skill's primary workflow involves reading and acting upon content from files such asplan.mdandspec.md, which creates an avenue for malicious instructions to be processed by the agent.\n - Ingestion points: The skill reads from
docs/plan/*/plan.md,docs/plan/*/spec.md,docs/workflow.md, andCLAUDE.mdas described inSKILL.md.\n - Boundary markers: There are no explicit delimiters or safety instructions provided to the agent when it ingests content from these documentation files.\n
- Capability inventory: The skill has extensive capabilities including shell execution (
Bash), file modification (Write,Edit), and environment management through package managers.\n - Sanitization: The skill lacks sanitization for instructions or commands extracted from the implementation plans and specifications; it specifically instructs the agent to run commands found within
spec.mdacceptance criteria.\n- [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes load-time command execution placeholders to populate context information.\n - Evidence:
SKILL.mdcontains the patterns!git branch --show-current,!git status --short, and!git log --oneline -3to fetch repository metadata.\n- [EXTERNAL_DOWNLOADS]: The skill automates the installation of development dependencies and git hooks using standard package management tools.\n - Evidence: It executes commands such as
pnpm prepare,uv run pre-commit install, andlefthook installto ensure the environment is configured correctly.
Audit Metadata