correct
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze external, potentially untrusted data sources including commit messages, reverts, review comments, and workarounds. An attacker with the ability to contribute to these data sources could attempt to influence the agent's behavior during the mistake discovery phase.
- Ingestion points: Recent commits, reverts, review comments, agent instruction files, and code comments.
- Boundary markers: No explicit instructions to ignore or isolate instructions found within the analyzed data are present.
- Capability inventory: The skill encourages broad repository modifications, including architectural changes, type system updates, and test creation.
- Sanitization: No sanitization or validation of the ingested historical data is specified.
Audit Metadata