implement
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external specifications and tickets as a primary source of truth, which creates a surface for malicious instructions to influence the agent's behavior.
- Ingestion points: External data is ingested from "supplied spec or tickets" and "repository instructions" (SKILL.md).
- Boundary markers: The skill employs a logical "Scope Contract" to define limits, but lacks technical delimiters or explicit instructions to ignore embedded commands in input data.
- Capability inventory: The agent has the capability to write to the file system and execute shell commands for building, linting, and testing (SKILL.md).
- Sanitization: No explicit sanitization or validation of the input content is described before it is processed.
- [COMMAND_EXECUTION]: The skill is designed to run repository-defined verification commands (lint, test, build). While necessary for its function, this involves executing local scripts that could be malicious if the workspace has been compromised or contains untrusted code.
Audit Metadata