correct
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from repository commits, revert logs, and review comments, which could potentially contain malicious instructions aimed at the agent.
- Ingestion points: Processes external data from recent commits, reverts, review comments, and comments that explain workarounds as described in the 'Find the mistake classes' section of SKILL.md.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the ingested data.
- Capability inventory: The skill allows for repository modification ('Change the repo') and command execution ('Run the same command locally and in CI').
- Sanitization: No explicit sanitization or filtering of the ingested repository data is mentioned.
Audit Metadata