implement
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external, potentially untrusted data in the form of specifications or tickets provided by the user (SKILL.md).
- Ingestion points: The agent ingests work descriptions from a "spec or set of tickets" (SKILL.md).
- Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the input data.
- Capability inventory: The skill allows the agent to write code, execute local shell commands (typechecking and tests), and perform git commits (SKILL.md).
- Sanitization: No sanitization or validation of the input content is specified.
- [COMMAND_EXECUTION]: The skill explicitly directs the agent to execute shell commands for running typecheckers, test suites, and git operations (SKILL.md).
Audit Metadata