engineering-ai-engineer
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill instructions direct the agent to ingest and analyze external documentation files, such as
ai/memory-bank/requirements.mdandai/memory-bank/data-sources.md. This workflow creates an indirect prompt injection surface where instructions embedded in those files could influence agent behavior. There are currently no explicit boundary markers or sanitization procedures defined to separate data from instructions during this ingestion. - [COMMAND_EXECUTION]: The skill provides workflow examples using shell commands including
cat,ls, andgrepto analyze project structure and data. These commands are used for local file system inspection and do not involve administrative privileges, persistence mechanisms, or remote execution.
Audit Metadata