validate-flow
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to run local CLI tools to verify project health and criteria fulfillment.
- Evidence:
doctrine.mdidentifies usage oftsc, linting tools, and project-specific scripts. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface due to reading criteria from external files.
- Ingestion points:
doctrine.mdspecifies reading from.agents/temp/repairs/.../ACCEPTANCE.mdand.agents/temp/goals/.../GOAL.md. - Boundary markers: No delimiters are specified to isolate the content of these files from the agent's instructions.
- Capability inventory: The agent can execute CLI commands and read workspace files.
- Sanitization: No sanitization of the input file content is performed.
Audit Metadata