candid-validate-standards
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and parses the content of
Technical.mdfiles to extract rules for validation. This external content is untrusted and could contain instructions designed to override the agent's behavior. - Ingestion points: Processes
Technical.mdand./.candid/Technical.mdfiles. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the processing logic.
- Capability inventory: Employs
ls,find, andgrepcommands to interact with the filesystem based on patterns found in the analyzed documentation. - Sanitization: The skill does not explicitly define sanitization or escaping mechanisms for data extracted from the target files before using it in shell-based verification tasks.
- [COMMAND_EXECUTION]: The skill performs active filesystem reconnaissance using standard shell utilities.
- Evidence: Uses
lsto detect linter configuration files (e.g.,.eslintrc,pyproject.toml,.rubocop.yml) and to verify the existence of paths cited in rules. - Evidence: Utilizes
findandgrepin Step 4.6 to sample files and check for rule compliance within the codebase.
Audit Metadata