implement
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The orchestrator uses Bash and PowerShell to run build, test, and lint commands identified within project configuration files. Evidence: Reference document Section 8 describes detection logic for tools like pnpm, cargo, and pytest.
- [EXTERNAL_DOWNLOADS]: The skill invokes standard package managers to handle project dependencies, which interact with official software registries. Evidence: Section 8 identifies support for npm, yarn, bun, pip, and cargo.
- [PROMPT_INJECTION]: The skill ingests instructions from external plan files and project documentation to parameterize sub-agent tasks, creating a surface for indirect instruction influence. Evidence: SKILL.md Steps 1 and 3 detail loading plans and architecture context from markdown files. Mitigation: The flow includes mandatory validation by task-reviewer and security-reviewer agents in Steps 8 and 8a.
Audit Metadata