implement
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-supplied data in the form of specifications or tickets to guide code implementation and verification tasks.
- Ingestion points: User-provided specifications or tickets are the primary input source for the implementation logic.
- Boundary markers: No delimiters or safety instructions are present to prevent the agent from following malicious commands hidden within the input specifications.
- Capability inventory: The skill allows the agent to write code, execute tests (subprocess execution), and commit changes to the current branch (filesystem/git operations).
- Sanitization: There is no evidence of sanitization or validation of the input text before it is processed by the agent.
Audit Metadata