build-feature
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and process multiple external data sources that could be influenced by third parties.
- Ingestion points: Reads content from
docs/<feature>/notes/*,PRINCIPLES.md,AGENTS.md,CONTRIBUTING.md, andPLAN.revN.notes.mdto inform its planning and implementation phases. - Boundary markers: The instructions do not specify explicit delimiters or 'ignore' instructions when processing these external files.
- Capability inventory: The agent has the ability to read and write files within the repository and execute Git commands (
git fetch,git log). - Sanitization: No explicit sanitization or validation of the content read from these files is mentioned.
- [COMMAND_EXECUTION]: The skill uses shell commands to interact with the repository's version control system.
- Evidence: Uses
git fetchandgit log --oneline <branch>..<main>to verify the project state before planning.
Audit Metadata