shipyard-verification
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to execute commands and interpret their full output to verify task completion, which constitutes an ingestion point for untrusted data.
- Ingestion points: Output from verification commands (e.g., 'npm test', 'pytest') as described in the 'Gate Function' and 'Verification Examples' in
SKILL.md. - Boundary markers: The instructions lack specific delimiters or guidelines for the agent to ignore potentially adversarial instructions embedded within the command output.
- Capability inventory: The skill encourages the agent to use its existing tool-use capabilities to run shell commands and analyze results.
- Sanitization: The skill provides no instructions for sanitizing, escaping, or filtering the content of the command output before it is processed by the agent.
Audit Metadata