release-readiness
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and trust content from
.agents/qa-project-context.mdto skip discovery questions, which creates a surface for indirect prompt injection if that file is attacker-controlled. - Ingestion points:
SKILL.mdinstructions to check.agents/qa-project-context.mdfirst. - Boundary markers: Absent; no instructions provided to ignore or escape embedded instructions within the context file.
- Capability inventory: The skill leverages shell commands including
curlandsentry-clifor health checks and issue monitoring. - Sanitization: Absent; the agent is expected to use the project context as-is.
- [COMMAND_EXECUTION]: The skill contains multiple executable command snippets for the user or agent to run during verification, including:
curlcommands for health checks and latency measurement.sentry-clicommands for querying recent application issues.jqfor parsing health check JSON responses.
Audit Metadata