align-and-improve
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data such as task specifications, review decisions, and code diffs to update repository documentation and external cards. This configuration presents a surface where instructions embedded in these inputs could influence the agent's output.
- Ingestion points: The skill reads the current task, linked specifications, implementation diffs, and verification results as specified in
SKILL.md. - Boundary markers: There are no explicit instructions or delimiters defined to separate untrusted data from the skill's own operational instructions.
- Capability inventory: The skill possesses the capability to modify repository documentation and update external tracking cards (mentioned in
SKILL.md). - Sanitization: No sanitization or validation mechanisms are described for the data ingested before it is interpolated into documentation updates.
Audit Metadata