bro-do-it
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external task specifications and plans that drive the behavior of developer and verifier sub-agents.
- Ingestion points: Input specifications (e.g.,
spec.md,delta-*.md) and task descriptions provided via the/bro-do-itcommand. - Boundary markers: The skill orchestrates tasks using specific templates (e.g.,
developer-prompt.md) and instructs the agent to treat plans as 'immutable sources of truth', though it relies on the model's instructions to resist adversarial content within those inputs. - Capability inventory: The skill allows file system modification (implementation), shell command execution (tests, builds), and local git operations (commits).
- Sanitization: Safety is managed through 'Implementation Hygiene' rules (defined in
references/implementation-hygiene.md) which explicitly forbid storing secrets, modifying live databases, or bypassing established project mechanisms. - [COMMAND_EXECUTION]: The verification process involves executing shell commands to validate the implementation.
- Evidence:
subagents/verifier-prompt.mdinstructs the sub-agent to 'Run relevant automated tests, standard static checks, type checks, and build.' - [DYNAMIC_EXECUTION]: The skill facilitates the execution of project-specific scripts and tests to verify development tasks.
- Evidence: The
verifiersub-agent is required to execute code within the project environment to provide 'reproducible proof' of task completion.
Audit Metadata