charted-green
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes content from external files provided via arguments, which could potentially contain malicious instructions intended to manipulate the agent's actions.
- Ingestion points: Accesses files at paths defined in
designDocPath($ARGUMENTS[0]) andtestFilePath($ARGUMENTS[1]). - Boundary markers: Lacks specific boundary markers or instructions to treat input file content strictly as data.
- Capability inventory: The agent is authorized to modify source code, update design documents, and execute local test commands.
- Sanitization: No content sanitization or validation logic is defined for the input files.
- [COMMAND_EXECUTION]: The skill requires the agent to run project-specific test commands to verify code changes.
- Evidence: The rules section explicitly instructs the agent to "run tests using the recommended approach for the project" or use the Wallaby skill.
Audit Metadata