implement-background-job

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard Rails CLI commands to perform application setup and database modifications.
  • Evidence: BACKENDS.md contains instructions for executing rails solid_queue:install and rails db:migrate as part of the backend configuration process.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection because it ingests untrusted user requirements to generate code and perform setup actions.
  • Ingestion points: User-provided specifications for background job functionality as described in SKILL.md.
  • Boundary markers: Absent; there are no explicit delimiters or instructions provided to separate user-provided data from the agent's internal operational logic.
  • Capability inventory: The skill facilitates file system writes (generating Job classes and specs) and shell command execution (rails CLI).
  • Sanitization: No validation or sanitization routines are specified for user input before it is interpolated into the generated source code or used in command-line interactions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 06:54 PM