web-code-style
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an interaction model where the agent reviews and writes code, creating a surface for indirect prompt injection. Malicious instructions could be hidden within the codebase being processed to manipulate the agent's review or code generation. 1. Ingestion points: Target source code files for review and editing. 2. Boundary markers: Not specified within the skill instructions. 3. Capability inventory: Code generation, review reporting, and local tool execution. 4. Sanitization: No specific filtering or sanitization of input code is defined.
- [COMMAND_EXECUTION]: The skill directs the agent to perform local validation by executing 'typecheck', 'lint', and 'test' commands. This is a standard procedure for development-oriented agents to ensure code quality and consistency with the repository's configuration.
Audit Metadata