verification-before-completion
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to process and verify output from external tools (tests, linters, build systems) and version control diffs. This creates a surface where malicious content in tool outputs could attempt to influence the agent. The skill mitigates this by enforcing a strict verification protocol.
- Ingestion points: External command output, tool logs, agent success reports, and VCS diffs as described in the Gate Function.
- Boundary markers: The structured checklist (Identify, Run, Read, Verify) acts as a logical boundary.
- Capability inventory: The skill facilitates agent execution of shell commands for verification.
- Sanitization: Relies on the agent's critical analysis of raw exit codes and log content.
- [SAFE]: No malicious patterns, obfuscation, or data exfiltration attempts were detected. The skill is entirely instructional and serves to harden the agent's task reporting process.
Audit Metadata