review-verify
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The agent is instructed to run the project's verification gate (type-checks, tests, builds) as defined in the project's own configuration.
- [COMMAND_EXECUTION]: The skill requires the agent to execute primary project behaviors such as CLI tools or function calls and observe the actual output.
- [REMOTE_CODE_EXECUTION]: The skill involves dynamic execution of code contained within the user's project, triggered by the verification process.
- [PROMPT_INJECTION]: The skill processes untrusted data (project diffs and file paths) which provides a surface for indirect prompt injection. Mandatory Evidence: 1. Ingestion points: Project diffs and file paths are processed in
SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: The agent has shell command execution (build/test/CLI) and file interaction capabilities inSKILL.md. 4. Sanitization: No sanitization is performed on the commands or data extracted from the project.
Audit Metadata