verify
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands such as find, grep, and git to verify implementation status and project structure. Evidence: SKILL.md and references/checkpoint-3-implementation.md.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests untrusted markdown data and interpolates it into shell commands without sanitization. Ingestion points: proposal.md and devdoc.md. Boundary markers: None. Capability inventory: find, grep, git, wc. Sanitization: None.
- [CREDENTIALS_UNSAFE]: The skill instructs the agent to search for hardcoded credentials like passwords and API keys in the codebase. Evidence: Step 3.6 in references/checkpoint-3-implementation.md.
Audit Metadata