verification-before-completion
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and evaluate external data from the repository and various tool outputs, which constitutes an attack surface for indirect prompt injection.
- Ingestion points: Data enters the agent's context through
git status,git diff,git log, test runner stdout/stderr, and HTTP response bodies fromcurlcommands. - Boundary markers: The instructions emphasize thoroughness in reading output (e.g., checking exit codes and passed/failed counts) but do not explicitly mandate the use of delimiters or boundary markers to encapsulate untrusted data.
- Capability inventory: The skill requires access to a wide range of powerful CLI tools including
git,curl,terraform,docker, and various language-specific build and test systems. - Sanitization: There are no instructions for sanitizing or escaping the content of command outputs or file contents before they are processed by the agent.
Audit Metadata