light-implement
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon data from external project sources such as ticket files and specifications, which could contain instructions intended to influence agent behavior.
- Ingestion points: Reads work items from the
.scratch/directory and project documentation (e.g.,SKILL.mdCore Loop Step 1 andWORKFLOW.mdStep 1). - Boundary markers: The skill lacks explicit boundary markers or directives to the agent to ignore embedded instructions within the ingested ticket content.
- Capability inventory: The workflow allows for the execution of shell commands (e.g.,
npm testinWORKFLOW.mdStep 5) and the invocation of additional model-driven skills such aslight-tddandlight-research. - Sanitization: No input validation, sanitization, or filtering of the ticket content is described before it is processed by the agent.
Audit Metadata