test
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
bashtool to executedocker build,docker run,make, andpytestcommands. Thedocker runcommand is configured with a host volume mount (--volume "$(pwd):/tmp/lint"), allowing the container to interact with the project's directory.\n- [PROMPT_INJECTION]: The skill includes behavioral instructions such as "Do not stop to ask mid-loop," which increases the agent's autonomy. It also creates a surface for indirect prompt injection by processing external project files like descriptors and Dockerfiles.\n - Ingestion points: Local repository files including
linters/*/Dockerfileand descriptors.\n - Boundary markers: None identified in the prompt instructions.\n
- Capability inventory: Access to
bash,docker,make,Read,Write, andEdittools.\n - Sanitization: No explicit sanitization of repository-provided data before use in commands.
Audit Metadata