final-release-review
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is instructed to process repository files and external data sources, which presents a surface for instructions embedded in data to influence agent behavior.
- Ingestion points: The skill inspects repository files, runtime environments, and external data sources as part of its primary workflow (SKILL.md).
- Boundary markers: Absent; there are no instructions provided to use specific delimiters or markers to isolate external data from the system prompt.
- Capability inventory: The skill has capabilities to read local files, execute build/test commands, and call external APIs via
sandbase_runfor model inference (SKILL.md, references/sandbase-api-map.md). - Sanitization: Absent; no specific sanitization, filtering, or escaping of ingested external content is described.
- [COMMAND_EXECUTION]: The skill instructions involve running focused tests, build checks, and static analysis tools on the local codebase to verify implementation success (SKILL.md, Quality gates).
Audit Metadata