implement-background-job
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard Rails CLI commands to perform application setup and database modifications.
- Evidence:
BACKENDS.mdcontains instructions for executingrails solid_queue:installandrails db:migrateas part of the backend configuration process. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection because it ingests untrusted user requirements to generate code and perform setup actions.
- Ingestion points: User-provided specifications for background job functionality as described in
SKILL.md. - Boundary markers: Absent; there are no explicit delimiters or instructions provided to separate user-provided data from the agent's internal operational logic.
- Capability inventory: The skill facilitates file system writes (generating Job classes and specs) and shell command execution (
railsCLI). - Sanitization: No validation or sanitization routines are specified for user input before it is interpolated into the generated source code or used in command-line interactions.
Audit Metadata