ss-coding
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill discovers and executes shell commands for testing (
TEST_COMMAND) and linting (LINT_COMMAND) by reading project configuration files such aspackage.json,Makefile,build.gradle,pom.xml, andTaskfile.yml.- [EXTERNAL_DOWNLOADS]: The skill accepts external URLs as input for requirements or design documents, which are passed to thess-planskill for processing.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the ingestion of external requirement documents and design wikis. - Ingestion points: External wiki pages, tickets, PRDs (via URLs), and plan files (
docs/plans/). - Boundary markers: The orchestrator restricts implementer subagents to specific task text and designated file scope boundaries, avoiding providing the full plan file to sub-processes.
- Capability inventory: The agent can execute git operations, shell-based test/lint commands, and dispatch subagents.
- Sanitization: No explicit sanitization or filtering of external content is mentioned before it is interpolated into implementer prompts.
Audit Metadata