fable-anti-slop-engineering

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The Python script scripts/diff_guard.py executes local git commands via subprocess.run to perform repository triage. The script follows security best practices by using list-based argument passing rather than shell execution string concatenation, effectively preventing command injection during the analysis process.- [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by processing external repository data and task specifications. It proactively mitigates this risk through the Test Integrity Protocol and Security & Operations references, which explicitly instruct the agent to treat all repository content as low-trust data and specifically scan for prompt injection attempts in code and documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 06:04 PM