skills/gamaroff/agent-skills/qa-gate/Gen Agent Trust Hub

qa-gate

Pass

Audited by Gen Agent Trust Hub on Nov 10, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from previous quality gate files and git history to determine review scope.
  • Ingestion points: Metadata and findings from LATEST_GATE files.
  • Boundary markers: Absent. No explicit delimiters are used to separate user-provided findings from instruction context in the YAML schema.
  • Capability inventory: Execution of shell commands (git, awk, sed, grep) and file system writes.
  • Sanitization: Basic regex extraction is used for commit hashes.
  • [COMMAND_EXECUTION]: The skill performs its logic via local shell commands.
  • Evidence: references/qa-re-review-scope.md contains scripts using git, awk, sed, and grep.
  • [DYNAMIC_EXECUTION]: The skill generates shell commands at runtime using file contents.
  • Evidence: Commit hashes from previous gates are used as arguments in git diff commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 10, 2026, 03:29 PM