easy-wins
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes external data including git history, issue trackers, and pull request content, which could contain adversarial instructions.\n
- Ingestion points:
SKILL.mdspecifies readinggit log, project manifests, and repository tooling for open PRs and issues.\n - Boundary markers: None identified. The instructions do not specify how to isolate or ignore instructions embedded in the data being scanned.\n
- Capability inventory: The skill is empowered to modify source code, create git branches, and execute repository-defined build/test scripts.\n
- Sanitization: The skill does not describe any sanitization or validation of the data retrieved from the repository history or metadata.\n- [COMMAND_EXECUTION]: The skill executes local repository commands to verify changes.\n
- Evidence: Instruction 4 in the 'Execute the chosen candidate' section directs the agent to run build, test, and lint tools provided by the repository.
Audit Metadata