implement
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of user-provided specifications and tickets to drive its actions.
- Ingestion points: The skill instructions in SKILL.md specify that work is based on a "spec or set of tickets" provided by the user.
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to distinguish between implementation instructions and potentially malicious commands embedded within the specs.
- Capability inventory: The skill possesses significant capabilities, including modifying the filesystem, running test suites, executing typechecking, and committing code changes to the current branch.
- Sanitization: No sanitization, validation, or filtering of the input specification is described before the agent begins the implementation process.
Audit Metadata