work
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Elixir build and test tools, including
mix compile,mix test,mix format, andmix ecto.migrate, as part of its core feature implementation and verification loop. - [COMMAND_EXECUTION]: Arbitrary Elixir code is executed using
project_evalfor feature-level behavioral smoke tests. The instructions specify using transactions and rollbacks to avoid persistent side effects during these evaluations. - [COMMAND_EXECUTION]: The skill integrates with local helper scripts such as
format-elixir.sh,iron-law-verifier.sh, anderror-critic.shto enforce coding standards and analyze failures. - [EXTERNAL_DOWNLOADS]: The skill uses
mix deps.getto resolve and download project dependencies from official repositories. - [PROMPT_INJECTION]: An indirect prompt injection surface is present because the skill processes instructions from markdown files within the
.claude/plans/directory. - Ingestion points: Plan and scratchpad files located at
.claude/plans/*/plan.mdand.claude/plans/*/scratchpad.mdas described in SKILL.md. - Boundary markers: Absent; the instructions are consumed as natural language without explicit delimiters to separate task content from agent instructions.
- Capability inventory: Project-wide file writes, arbitrary subprocess execution via the
mixCLI, and dynamic Elixir evaluation viaproject_evalas detailed in execution-guide.md. - Sanitization: Absent; the skill does not perform escaping or validation of the natural language instructions read from plan files.
Audit Metadata