implement-copy
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied specifications or tickets to implement code. This creates an attack surface where malicious instructions embedded in the input could attempt to influence the agent's actions.\n
- Ingestion points: The agent reads and acts upon a 'spec or set of tickets' provided by the user in SKILL.md.\n
- Capability inventory: The agent has the ability to execute git commands (fetch, pull, switch), write to local documentation files (docs/agents/branching.md), and run project test suites and build tools.\n
- Boundary markers: The skill does not define specific delimiters or instructions to ignore potential commands embedded within the task specifications.\n
- Sanitization: No sanitization or validation of the input specifications is mentioned before processing.\n- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to manage branches and verify code changes.\n
- Evidence: Git commands such as 'git fetch origin', 'git switch', and 'git pull' are explicitly used for branch synchronization.\n
- Evidence: The agent is required to run 'typechecking' and 'test suites', which involve executing project-level binaries and scripts.
Audit Metadata