implement
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection by processing untrusted user data to perform file writes and command executions.
- Ingestion points: User-provided specifications or tickets mentioned in SKILL.md.
- Boundary markers: The instructions lack explicit delimiters or warnings to ignore instructions embedded within the ingested data.
- Capability inventory: The skill enables writing code, executing typecheckers and test suites, and performing git commits.
- Sanitization: No sanitization or validation of the external input data is specified.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute system commands for testing and typechecking purposes.
- Evidence: 'Run typechecking regularly, single test files regularly, and the full test suite once at the end.' in SKILL.md.
Audit Metadata