unslop
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted code diffs and has the capability to modify local source files and execute development tools (linters, test runners) based on those diffs.
- Ingestion points: Code diffs from the working tree or specific git branches (SKILL.md, Step 1).
- Capability inventory: The agent is instructed to modify files and execute shell commands to run type-checks, linters, and tests (SKILL.md, Steps 2 and 5).
- Boundary markers: Absent. There are no instructions to wrap or delimit the input diff to prevent the agent from interpreting instructions embedded within the code.
- Sanitization: Absent. The skill does not describe any validation or sanitization of the code content before analysis or execution of the verification gate.
- [COMMAND_EXECUTION]: The skill instructions require the agent to execute shell commands to verify the integrity and behavior of the code being modified.
- Evidence: "Run the typecheck, lint and tests before you edit anything" and "Apply the removals, then run the same gate again" (SKILL.md). These commands are executed locally to ensure behavior preservation.
Audit Metadata