rule-maker
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The scripts
scripts/activate_rules.pyandscripts/audit_installation.pyutilizeimportlib.util.spec_from_file_locationto dynamically load internal helper scripts (such asworkflow/scripts/global_policy.pyandactivate_rules.py) using paths calculated at runtime relative to the script location. - [COMMAND_EXECUTION]: The
scripts/readiness.pyscript invokes thegitcommand-line tool usingsubprocess.runto gather workspace identity information, including the repository root, current branch, and commit hash. - [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves reading project-specific files (e.g.,
package.json,composer.json, and various.mdfiles) to assess rules readiness, which creates a potential surface for indirect prompt injection if those project files contain malicious instructions. - Ingestion points: The scripts
readiness.pyandversion_facts.pyread configuration and markdown files from the target project directory during the inspection process. - Boundary markers: The skill employs explicit markers (
<!-- workflow-axa:shared-rules:start -->and<!-- workflow-axa:shared-rules:end -->) to delineate its injected instructions when modifying global configuration files. - Capability inventory: The skill possesses the capability to read project files, write to global agent instruction files, and execute shell commands (specifically
git). - Sanitization:
scripts/activate_rules.pyperforms regex-based validation on the library path to prevent the inclusion of unexpected Markdown or shell control characters in generated instruction blocks.
Audit Metadata