jww-repository-validation
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill guides the agent to read and follow validation instructions from repository files, which can be manipulated to influence agent behavior.\n
- Ingestion points: The agent is instructed to read
AGENTS.md,README, contributor guidance, and package manifests within the project repository (SKILL.md).\n - Boundary markers: Absent; the skill does not define delimiters or specific warnings to distinguish between trusted instructions and potentially untrusted repository content.\n
- Capability inventory: The agent is directed to execute shell commands such as
git diff --check, formatters, linters, builds, and test suites (SKILL.md).\n - Sanitization: Absent; there are no instructions provided to sanitize or validate the commands or parameters extracted from the repository files before execution.
Audit Metadata