fable-anti-slop-engineering
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The Python script
scripts/diff_guard.pyexecutes localgitcommands viasubprocess.runto perform repository triage. The script follows security best practices by using list-based argument passing rather than shell execution string concatenation, effectively preventing command injection during the analysis process.- [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by processing external repository data and task specifications. It proactively mitigates this risk through theTest Integrity ProtocolandSecurity & Operationsreferences, which explicitly instruct the agent to treat all repository content as low-trust data and specifically scan for prompt injection attempts in code and documentation.
Audit Metadata