work-implement
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard development utility commands including
git status,git checkout,lint,typecheck, andbuild. These commands are integral to the skill's purpose of implementing and verifying code changes and are executed within their expected operational context. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface because it reads and processes data from external specification files. Ingestion points: Markdown files located in
docs/specs/user-stories/,docs/specs/work-items/, anddocs/specs/migrations/. Boundary markers: No explicit delimiters or instruction-ignoring warnings are defined for the ingested content. Capability inventory: Git operations, file system access, and project-specific build/lint tool execution. Sanitization: No specific sanitization or validation is applied to the content of the specifications. This risk is minimized by the skill's requirement for human confirmation at every step. - [SAFE]: The skill exhibits high operational security standards by mandating a clean working tree before starting work, enforcing a strict 'one unit per confirmation' workflow, and delegating specialized tasks like UI and testing to dedicated sub-specialist agents.
Audit Metadata