receiving-orders
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on technical rigor and provides defensive instructions to ensure that external feedback is verified before implementation.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process data from external sources such as pull request comments, which is a potential surface for indirect instructions.
- Ingestion points: Processes input from external reviewers and PR comments.
- Boundary markers: Implements a structured Response Protocol (Read, Understand, Verify, Evaluate) to filter feedback.
- Capability inventory: Instructs the agent to use grep for searching the codebase and the GitHub CLI (gh api) for communication.
- Sanitization: Requires the agent to verify all claims against the codebase reality (the Rule of Truth) and project architectural decisions before acting.- [COMMAND_EXECUTION]: The instructions guide the agent to use common shell-based utilities for code verification and GitHub interaction.
- Evidence: Explicitly mentions using grep to check for code usage and gh api to manage comment replies on GitHub.
Audit Metadata