why
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and interpret data from external sources that may be influenced by third parties, creating a surface for indirect prompt injection.
- Ingestion points: The skill explicitly instructs the agent to read and process data from
git log,gh(GitHub CLI) commands for commits and pull requests, issue trackers (GitHub, Linear, etc.), repository documentation (ADRs, RFCs), team chat tools, and infrastructure observability logs as noted inSKILL.md. - Boundary markers: The instructions do not define specific delimiters or boundary markers to isolate untrusted data from these sources from the agent's core instructions.
- Capability inventory: The skill utilizes file system access to read rules and repository files, and executes shell commands including
gitandghas described in the Process section ofSKILL.md. - Sanitization: There is no evidence of explicit sanitization, filtering, or validation steps for the content retrieved from external tools before it is processed by the AI model.
Audit Metadata