just-do-it
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to facilitate the git development lifecycle and GitHub integration.
- Evidence: Commands such as
git rev-parseto capture SHAs,git commitfor checkpointing state, andgit push -u origin HEADto transmit work are core to the lifecycle. - Safety Context: The skill's doctrine explicitly prohibits force-pushing and modifications to the default branch, and it requires authentication preflights before pushing.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external Linear tickets, creating a vector for potentially malicious input to influence sub-agents.
- Ingestion points: Ticket details are resolved using the
/trackerscommand as defined indoctrine.mdandreference.md. - Boundary markers: The skill employs a visible 'Execution context' in the chat that strictly defines binary 'Done when' checks, 'non-goals', and specific 'Active Rules' to constrain behavior.
- Capability inventory: The agent has filesystem write access via git, the ability to invoke sub-agents like
/taskfor implementation, and network write capabilities for PR creation viaghor Cursor tools. - Sanitization: Although explicit string sanitization of ticket content is not detailed, the rigid transition between research, implementation, and two mandatory code review phases (CR1/CR2) ensures implementation is validated against ticket intent before shipping.
Audit Metadata