implement-task
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by design. It instructs the agent to strictly follow instructions and requirements contained within external 'task packets' and linked specifications.\n
- Ingestion points: The skill processes external data including task packets (type: task), specifications, and repository-level configuration files like AGENTS.md.\n
- Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the guide.\n
- Capability inventory: The agent is granted file system access and the ability to execute shell commands to fulfill task requirements and verification steps.\n
- Sanitization: There is no instruction to sanitize or validate the 'Verify' commands or requirements provided in the external input before execution or implementation.\n- [COMMAND_EXECUTION]: The skill directs the agent to execute arbitrary shell commands provided in the task's verification checklist.\n
- Evidence: 'Run every Verify item and paste the real output — the command, its exit status, and the summary lines' (SKILL.md, Rule 5).
Audit Metadata