skillshare-implement-feature

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill facilitates the execution of local development commands such as 'make test-int', 'go test', and 'make check' to verify feature implementation.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting feature specifications or descriptions from untrusted sources to generate and execute code.
  • Ingestion points: The skill reads content from specification files or text descriptions provided via the '$ARGUMENTS' parameter.
  • Boundary markers: The instructions do not define clear delimiters or specific instructions to disregard embedded commands in the specification content.
  • Capability inventory: The skill has the capability to write Go source files and execute build and test commands using the local environment.
  • Sanitization: There is no mention of input sanitization or validation for the specification content before it influences code generation and execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 10:49 PM
Security Audit — agent-trust-hub — skillshare-implement-feature