react-feature
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/validate.tsfile usesnode:child_process.spawnSyncto execute project-local commands such aspnpm run lint,pnpm run test, andpnpm run build. This is a standard automation pattern for development workflows to verify changes before submission. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read feature specifications and tickets from external tracking systems. This represents a potential indirect injection surface if external data sources are compromised.
- Ingestion points: Section 1 ('Frame the screen') directs the agent to read ticket references through a configured tracker.
- Boundary markers: None specified in the instructions for external data.
- Capability inventory: The skill has capabilities for file system writes (creating features/routes) and subprocess execution via the validation script.
- Sanitization: No specific sanitization or filtering is mentioned for the ingested ticket data.
Audit Metadata