grinding-until-pass
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and analyze output from external tools (tests, compilers, linters) to decide on subsequent code modifications. This creates a surface where malicious instructions embedded in error messages or test logs could influence the agent's autonomous actions.
- Ingestion points: Terminal output and error logs captured during the execution of commands like
npm testornpm run build(Steps 2 and 3). - Boundary markers: The skill lacks explicit instructions to treat command output as untrusted data or use specific delimiters to separate it from the system instructions.
- Capability inventory: The skill provides the agent with file-writing capabilities and shell command execution permissions to resolve detected errors.
- Sanitization: No sanitization, escaping, or validation of the external command output is mentioned before the agent uses it for iteration.
- [COMMAND_EXECUTION]: The skill is designed to execute arbitrary build, test, and linting commands in a tight loop. While these are standard development workflows, the instructions encourage the agent to autonomously execute these commands up to 10 times without further user intervention.
Audit Metadata