implement
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external specifications or tickets which could contain instructions to manipulate the agent's behavior during code implementation.
- Ingestion points: Processes external data from "spec" and "ticket" sources as described in SKILL.md.
- Boundary markers: The instructions do not define boundary markers or include warnings to ignore instructions embedded within the processed data.
- Capability inventory: The skill allows implementation of code (file system writes), running tests, and committing changes to the current branch (version control).
- Sanitization: There is no evidence of sanitization or validation for the content of the specifications or tickets.
Audit Metadata