skills/jei-skappa/skills/implement/Gen Agent Trust Hub

implement

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill performs file system modifications and executes shell commands for version control, specifically git status --porcelain and git commit. It also triggers 'standing gates'—project-defined scripts such as lint, format, or test—which involves executing arbitrary code found within the target repository.
  • [EXTERNAL_DOWNLOADS]: The skill fetches content from external GitHub issue URLs (github.com) to use as instructions for the implementation process.
  • [PROMPT_INJECTION]: The skill is designed to ingest untrusted data from GitHub issues or raw user prompts and translate them directly into tasks. It lacks explicit boundary markers to separate instructions from input data and is configured to run autonomously by default ('do not pause for clarifying questions at each step or ask before committing'), which provides an entry point for indirect prompt injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 08:33 PM
Security Audit — agent-trust-hub — implement