iterate-implementation
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
ls -Laandgrepcommands via Bash to locate task-specific directories within.humanlayer/tasks/. This is used for navigational purposes and to handle symlinks correctly. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data including plan documents, tickets, and task artifacts.
- Ingestion points: Reads files from
.humanlayer/tasks/such asticket.md,task.md, research documents, and design discussions. - Boundary markers: None explicitly defined in the prompt instructions for external data ingestion.
- Capability inventory: Access to
Read,Write,Edit,MultiEdittools, as well asBashfor directory listing and theAgenttool for sub-agent delegation. - Sanitization: No explicit sanitization or escaping of the external document content is mentioned before it enters the agent context.
- [SAFE]: The referenced template file
references/iterate_implementation_final_answer.mdcontains static markdown and placeholder text for standardized reporting, which does not present a security risk.
Audit Metadata