implement
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could contain malicious instructions designed to influence the agent's code implementation or repository management actions.
- Ingestion points: The agent is instructed to read from conversations, specifications, tickets, issue trackers, primary documentation, and shared research notes (SKILL.md, references/all-tickets.md).
- Boundary markers: There are no explicit instructions or delimiters defined to help the agent distinguish between legitimate task data and embedded malicious prompts within the external sources.
- Capability inventory: The skill has significant capabilities including creating/merging branches, committing code, pushing to remote repositories, opening/updating pull requests, and spawning subagents for implementation and merging (SKILL.md, references/all-tickets.md).
- Sanitization: No sanitization or validation logic is present to filter or escape instructions found within the ingested data before they influence the agent's behavior.
Audit Metadata