implementer
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill outlines a structured development process emphasizing test-first development and verification. No malicious behaviors such as data exfiltration, obfuscation, or unauthorized remote code execution were found.
- [COMMAND_EXECUTION]: The skill involves executing shell commands like
git diffand delegating test runs to a subagent. These actions are restricted to the local development environment and are necessary for the skill's intended purpose. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content (project source code and test output). While this creates an entry point for instructions embedded in data, the skill's reliance on structured phases and a separate test-runner subagent provides architectural boundaries.
Audit Metadata