verification
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data from original user requests and external evidence sources (e.g., logs, test outputs) which could potentially contain malicious instructions.
- Ingestion points: SKILL.md (Step 1: original request, Step 3: evidence).
- Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore instructions embedded within the ingested data.
- Capability inventory: The skill enables the agent to execute shell commands to run test suites (SKILL.md Step 4) and write persistent documentation artifacts to the filesystem (SKILL.md Step 6).
- Sanitization: There are no explicit instructions for sanitizing or validating the input data before it influences the agent's actions.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the project's test suite to verify functionality and check for regressions.
- Evidence: SKILL.md (Step 4) and references/checklist.md (Regression Check section).
Audit Metadata