dstack-beads-close-feature
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands via the
dstackbinary located at a relative path from{baseDir}. It also invokes supplementary commands likedelivery pr-preflightanddelivery mergeto handle feature delivery. - [INDIRECT_PROMPT_INJECTION]: The feature reconciliation process requires the agent to read and evaluate external code, tests, and durable documentation, creating an attack surface for instructions embedded in those materials.
- Ingestion points: Project implementation files, source code, and durable documentation (referenced in SKILL.md).
- Boundary markers: Absent; the skill does not instruct the agent to use delimiters or ignore instructions found within the reconciled data.
- Capability inventory: Shell command execution via the
dstackCLI tool. - Sanitization: Absent; there is no mention of validating or escaping the reconciled content before processing.
Audit Metadata