verification-gauntlet
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill guides the agent to use a CLI tool named
agentitfor running verification probes and managing compliance receipts. This command execution is scoped to the project environment and serves the primary function of the skill to ensure work quality. - [INDIRECT_PROMPT_INJECTION]: The skill handles potentially untrusted data from project files and task descriptions. 1. Ingestion points: Task input in
agentit verify "task"and config files likeprobes/catalog.yaml. 2. Boundary markers: Absent. 3. Capability inventory: Execution of local project scripts. 4. Sanitization: Not explicitly present, but mitigated by the 'anti-greenwash' rules and the mandatory requirement for observed evidence before claiming completion.
Audit Metadata