verification-loop
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various project-level shell commands to verify the environment, such as
npm run build,npm run lint,npx tsc,pyright,ruff, andnpm run test. - [COMMAND_EXECUTION]: Uses
grepto scan the local file system for sensitive patterns (e.g.,sk-,api_key) andgit diffto analyze project changes. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by ingesting and processing untrusted project data (Category 8).
- Ingestion points: Local source code files (via
grep), build and test logs, and git diff outputs. - Boundary markers: No explicit delimiters or markers are used to isolate untrusted data from instructions.
- Capability inventory: The agent has extensive shell execution capabilities through multiple development tools.
- Sanitization: No sanitization or validation of the external content is performed before it is added to the agent's context.
Audit Metadata