implement
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon untrusted external data in the form of specifications or tickets, which could contain malicious instructions targeting the agent's execution environment.
- Ingestion points: Content from user-provided specifications or tickets referenced in SKILL.md.
- Boundary markers: Absent. The instructions do not specify delimiters or warnings to ignore instructions embedded within the processed data.
- Capability inventory: The agent is instructed to run tests, typecheckers, and execute git commits (SKILL.md), providing a vector for code execution or repository manipulation if the input data is malicious.
- Sanitization: Absent. There are no instructions for validating or sanitizing the input data before it influences agent actions.
Audit Metadata