verification-loop
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands to perform build, test, and linting operations (e.g.,
npm run build,npx tsc,ruff check,git diff). These are standard development tasks but provide a broad interface for interacting with the local system environment and project-defined scripts. - [PROMPT_INJECTION]: The skill ingests and processes the output of external tools and system commands, which represents an indirect prompt injection surface. A malicious repository could contain scripts or files that generate deceptive output to influence the agent's summary or subsequent decisions.
- Ingestion points: Standard output and error streams from build, type-check, lint, test, and git commands as described in Phases 1-6 (SKILL.md).
- Boundary markers: No explicit delimiters or instructions are used to separate raw command output from the agent's instruction context.
- Capability inventory: The skill possesses the capability to execute shell commands, read project files via grep, and inspect repository states via git (SKILL.md).
- Sanitization: There is no evidence of output sanitization or validation before the tool results are incorporated into the agent's analysis report.
Audit Metadata