implement

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from specifications or tickets, which could contain malicious instructions designed to influence the agent's behavior during implementation or testing.\n
  • Ingestion points: Processes external specifications and tickets as described in SKILL.md.\n
  • Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the skill definition.\n
  • Capability inventory: The skill is authorized to run typechecking, execute test files, run full test suites, and commit changes to the git repository.\n
  • Sanitization: There are no mechanisms mentioned for sanitizing or validating the content of the provided specs or tickets before processing.\n- [DYNAMIC_EXECUTION]: The skill is designed to implement new code based on external descriptions and immediately execute that code through typecheckers and test suites.\n
  • Evidence: SKILL.md instructs the agent to implement work and run typechecking and tests regularly on the generated code.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 04:25 PM
Security Audit — agent-trust-hub — implement