implement
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, which can serve as a vector for malicious instructions targeting the agent's execution environment.
- Ingestion points: The skill ingests data from user-provided "spec or tickets" as specified in the instructions.
- Boundary markers: There are no explicit delimiters or system-level instructions defined in the prompt to separate user-supplied content from the agent's operational logic.
- Capability inventory: The skill is authorized to perform multiple sensitive operations, including running typechecking, executing test suites, and committing code to a repository.
- Sanitization: The instructions do not define any validation, escaping, or sanitization protocols for the input received from external specifications.
Audit Metadata