resolve-repository-state
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions define a process that ingests and evaluates external, potentially untrusted data to update project state.
- Ingestion points: The agent is instructed to read "evidence sources" and "contradiction rows" from the repository (SKILL.md, Process steps 1 and 2).
- Boundary markers: The instructions do not specify the use of delimiters or sanitization wrappers when handling these external evidence sources.
- Capability inventory: The skill is described as the "sole writer allowed to update frozen repository facts," implying it possesses file-writing capabilities to persist decisions.
- Sanitization: There are no explicit instructions to sanitize or validate the content of the evidence sources before they are incorporated into the frozen ledger.
Audit Metadata