goal
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to autonomously process repository content, creating a vulnerability surface where instructions embedded in project files could influence the agent's behavior.
- Ingestion points: The agent is instructed to inspect existing files and commit history as the "source of truth" for the repository (SKILL.md, Initial behavior).
- Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are defined for the content read from the repository.
- Capability inventory: The skill utilizes file writing, git commit creation, and shell command execution for build, test, and linting tasks (SKILL.md, Core principle, Validate).
- Sanitization: There is a requirement to inspect diffs for secrets before committing, but no sanitization or validation of logic or instructions found within the repository files being processed.
- [DYNAMIC_EXECUTION]: The skill triggers the execution of build scripts and testing suites found within the repository environment.
- Evidence: The workflow involves running unit tests, integration tests, type checks, linting, and build commands as part of the validation step (SKILL.md, Validate).
Audit Metadata