gate-check
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a prescriptive project management workflow that inspects repository state and requires user confirmation for significant actions, such as advancing to a new production stage.
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run project-local test suites and to update the
production/stage.txtfile. These operations are restricted to the local environment and are triggered as part of the formal validation process. - [INDIRECT_PROMPT_INJECTION]: The skill processes various project-local documentation (e.g., GDDs, ADRs, playtest reports), which represents a data ingestion surface.
- Ingestion points: Reads project files via
Read,Glob, andGrepacross directories likedesign/,docs/, andproduction/. - Boundary markers: The skill does not explicitly utilize boundary markers or safety instructions when processing the content of these files.
- Capability inventory: The agent has access to
Bashfor command execution,Writefor file modification, andTaskfor sub-agent creation, though these are used within the scope of the gated workflow. - Sanitization: No specific sanitization or filtering is applied to the ingested text before it is analyzed by the model.
Audit Metadata