boil
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to read task-description arguments and scan project files for TODO, FIXME, or PENDING markers. These ingestion points could contain malicious instructions designed to influence agent behavior.
- Ingestion points: task-description argument and local files scanned for markers using Read and Grep tools.
- Boundary markers: None; the skill does not instruct the agent to ignore instructions embedded in the scanned content.
- Capability inventory: Bash, Edit, Write, and Agent tools allow for broad system interaction including file modification and command execution.
- Sanitization: No sanitization, escaping, or validation of the input data is mentioned in the workflow.
Audit Metadata