senior-engineer
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The instructions define a standard professional workflow for an AI agent to handle engineering tasks. It explicitly restricts the agent to read-only operations in production unless the user provides approval.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user requests to drive engineering actions, representing an attack surface for indirect prompt injection.
- Ingestion points: User requests for bugs or infrastructure changes as described in the Goal section of SKILL.md.
- Boundary markers: Absent; the instructions do not provide specific delimiters or instructions to ignore embedded instructions in the user's data.
- Capability inventory: Referenced mechanics (ship, reproduce, verify-prod) imply capabilities to modify the file system and execute verification scripts.
- Sanitization: Absent; no validation or sanitization of user-provided requests is specified.
Audit Metadata