implement
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data in the form of a 'spec or set of tickets' provided by the user.
- Ingestion points: User-provided specifications or tickets (referenced in SKILL.md).
- Boundary markers: None explicitly defined to separate user instructions from skill logic.
- Capability inventory: The instructions direct the agent to 'Implement the work', 'Run typechecking', 'Run test files', and 'commit the changes', implying file system write access and shell command execution capabilities.
- Sanitization: There are no instructions for sanitizing or validating the contents of the spec or tickets before processing. An attacker could embed malicious instructions within a ticket to manipulate the implementation or execution behavior.
Audit Metadata