deslop
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted code diffs which could contain embedded instructions intended to manipulate agent behavior.\n
- Ingestion points: External code diffs referenced in SKILL.md.\n
- Boundary markers: Absent; the skill does not specify delimiters or instructions to ignore embedded prompts in the diff data.\n
- Capability inventory: The agent is instructed to execute shell commands for type checking and testing as noted in SKILL.md.\n
- Sanitization: Absent.\n- [COMMAND_EXECUTION]: The skill mandates the execution of local development tools to verify the integrity of refactored code.\n
- Evidence: 'Run the project's type check and tests after editing.' in SKILL.md.
Audit Metadata