skills/lbk-open/super-spec/ss-coding/Gen Agent Trust Hub

ss-coding

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill discovers and executes shell commands for testing (TEST_COMMAND) and linting (LINT_COMMAND) by reading project configuration files such as package.json, Makefile, build.gradle, pom.xml, and Taskfile.yml.- [EXTERNAL_DOWNLOADS]: The skill accepts external URLs as input for requirements or design documents, which are passed to the ss-plan skill for processing.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the ingestion of external requirement documents and design wikis.
  • Ingestion points: External wiki pages, tickets, PRDs (via URLs), and plan files (docs/plans/).
  • Boundary markers: The orchestrator restricts implementer subagents to specific task text and designated file scope boundaries, avoiding providing the full plan file to sub-processes.
  • Capability inventory: The agent can execute git operations, shell-based test/lint commands, and dispatch subagents.
  • Sanitization: No explicit sanitization or filtering of external content is mentioned before it is interpolated into implementer prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 09:08 AM
Security Audit — agent-trust-hub — ss-coding