correct
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze external data sources within the repository, such as commit history and review comments, to identify repetitive error patterns. This introduces a surface where malicious instructions in commit messages could theoretically influence the agent, though the risk is localized to the repository development process.
- Ingestion points: Recent commits, reverts, review comments, and existing agent instruction files (SKILL.md).
- Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the provided instructions.
- Capability inventory: Reading repository metadata and files; modifying project architecture, types, lint rules, and tests.
- Sanitization: No explicit sanitization or validation of the ingested text is performed before analysis.
Audit Metadata