implement
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external content that could contain instructions to influence the agent's behavior during implementation.\n
- Ingestion points: The agent is instructed in
SKILL.mdto "Implement the work described by the user in the spec or tickets."\n - Boundary markers: There are no defined delimiters or instructions to ignore embedded commands within the input data.\n
- Capability inventory: The skill allows the agent to execute system commands for testing and to perform git commits (
SKILL.md).\n - Sanitization: No input validation or sanitization of the specification content is mentioned.\n- [COMMAND_EXECUTION]: The skill requires the execution of shell commands to fulfill its primary purpose.\n
- Evidence:
SKILL.mdexplicitly directs the agent to "Run typechecking regularly" and "the full test suite once at the end."
Audit Metadata