implement

Pass

Audited by Gen Agent Trust Hub on Jul 7, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [SAFE]: No malicious code, exfiltration patterns, or obfuscation detected. The skill's instructions align with its stated purpose of implementing work based on requirements.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests external, potentially untrusted content to guide its actions.
  • Ingestion points: PRDs and issue descriptions (referenced in SKILL.md).
  • Boundary markers: Absent; there are no instructions to use delimiters or ignore instructions embedded within the PRD/issues.
  • Capability inventory: Shell execution for running test suites and typechecking, and filesystem modification via Git commits (referenced in SKILL.md).
  • Sanitization: Absent; no input validation or sanitization of the external content is mentioned.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 7, 2026, 02:17 AM
Security Audit — agent-trust-hub — implement