verification-loop
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various local development commands including
uv,npm,npx,pytest, andgit. This is the intended primary purpose of the skill to facilitate code verification within a development environment. - [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill ingests and processes output from external tools which could potentially contain adversarial instructions embedded in logs or test failure messages.
- Ingestion points: The skill captures and processes output from
uv build,npm run build,npx tsc,pyright,ruff,pytest,grep, andgitacross all verification phases. - Boundary markers: Absent. There are no instructions or delimiters provided to the agent to distinguish between tool output and instructions, nor warnings to ignore embedded content.
- Capability inventory: The skill leverages subprocess execution to run project-specific build systems, test runners, and file system searches.
- Sanitization: Absent. Data from external tool outputs is interpolated directly into the agent's context without sanitization or validation.
Audit Metadata