generate
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs local command execution to run tests as part of its mandatory TDD workflow described in Step 4.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it reads and follows instructions from untrusted plan files within the codebase.
- Ingestion points: Reads task instructions from
docs/nemodev-plans/[Feature-Name].md(Step 1). - Boundary markers: No specific delimiters or instructions are used to separate user-provided task data from agent instructions.
- Capability inventory: The skill allows for file modifications and the execution of shell commands for testing purposes.
- Sanitization: There is no evidence of sanitization or safety checks performed on the data ingested from Markdown files.
Audit Metadata