boring-mode
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The instructions direct the agent to perform standard development tasks using shell commands, including
npm run build,npm run journey,grep, andgitoperations. These commands are integral to the skill's purpose of managing repository tasks. - [DYNAMIC_EXECUTION]: The
playbooks/feature.mdandplaybooks/perf-issue.mdfiles instruct the agent to delegate code implementation to subagents. This facilitates complex task decomposition and parallelization within the agent's execution environment. - [EXTERNAL_DOWNLOADS]: In
playbooks/prototype.md, the skill permits the use of CDN-hosted dependencies when building throwaway prototypes. This behavior is scoped to an isolated scratch directory for experimental purposes and follows common development practices. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external project documentation and feature specifications (e.g.,
docs/product/CONTEXT.md,features/F-<n>.md) which serves as a potential vector for indirect instructions. - Ingestion points: Feature contracts (
features/F-<n>.md), context files (docs/product/CONTEXT.md), and verification artifacts (docs/verify/). - Boundary markers: The instructions do not specify the use of delimiters or specific warnings to ignore instructions embedded within these data sources.
- Capability inventory: The agent possesses capabilities to execute shell commands, perform file system writes, commit to version control, and spawn subagents.
- Sanitization: There is no mention of sanitization, filtering, or validation processes for the content ingested from these project files.
Audit Metadata