sdk-feature-implementation
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill extensively uses the
Bashtool to perform local and remote operations, including repository management, code modification, and CI log retrieval. - Specific tools executed include
git,ghCLI, and a variety of language-specific test runners and build systems (e.g.,cargo,npm,pytest,gradle,mix,dotnet). - Sub-agents are instructed to run local formatters and linters after installing dependencies.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources and incorporates it into implementation instructions for parallel agents.
- Ingestion points: Retrieves feature specifications from user-provided URLs via
WebFetch, and fetches issue descriptions, project details, and comments from Linear and GitHub. - Boundary markers: Absent. The instructions do not define clear delimiters or provide instructions to ignore potentially malicious directions embedded in the external specs or issue comments.
- Capability inventory: The skill possesses high-privilege capabilities including arbitrary command execution (
Bash), repository manipulation (git,gh), and spawning additional agent tasks (Task). - Sanitization: None. Data from external specifications is summarized but not sanitized or escaped before being passed to sub-agents.
- [EXTERNAL_DOWNLOADS]: The skill clones source code from various SDK repositories within the vendor's GitHub organization (
getsentry). - It uses the
gh repo clonecommand to download target repositories for modification and testing.
Audit Metadata