feature-verify
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill specifies the use of command-line tools like curl and Invoke-RestMethod, alongside the execution of unit tests and scripts. These capabilities are intended for verifying application logic and are standard for software development tasks.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process external data sources such as logs, database records, and UI responses. This presents an attack surface where malicious data produced by the application could attempt to influence agent instructions. The skill structure mitigates this through a predefined checklist and observation methodology.
Audit Metadata