implement
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from specifications or tickets, which could contain malicious instructions designed to influence the agent's behavior during implementation or testing.\n
- Ingestion points: Processes external specifications and tickets as described in SKILL.md.\n
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the skill definition.\n
- Capability inventory: The skill is authorized to run typechecking, execute test files, run full test suites, and commit changes to the git repository.\n
- Sanitization: There are no mechanisms mentioned for sanitizing or validating the content of the provided specs or tickets before processing.\n- [DYNAMIC_EXECUTION]: The skill is designed to implement new code based on external descriptions and immediately execute that code through typecheckers and test suites.\n
- Evidence: SKILL.md instructs the agent to implement work and run typechecking and tests regularly on the generated code.
Audit Metadata