remove-option-or-flag
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied feature flag or option names to drive search and code modification tasks, creating a surface for potential prompt injection. * Ingestion points: User-provided flag or option names obtained via trigger phrases in SKILL.md. * Boundary markers: The agent is instructed to stop and ask for user guidance if it encounters regional disagreements or data drift, providing a manual oversight gate. * Capability inventory: The agent is authorized to read files using ripgrep and modify source code in 'sentry', 'getsentry', and 'sentry-options-automator' repositories. * Sanitization: No specific sanitization or validation of the user input is mentioned before its use in search commands or code edits.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for searching the codebase using inputs provided by the user. * Evidence: The command 'rg -n "" src/ static/ tests/' in SKILL.md utilizes the user-provided '' directly.
Audit Metadata