slo-implementation
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external documentation and repository data via vendor-specific tools, creating a surface for potential instruction injection in processed data. Ingestion points: Data enters the context via sandbase_discover and sandbase_inspect as defined in SKILL.md and references/sandbase-api-map.md. Boundary markers: The workflow mandates checking repository instructions and preserving public contracts, emphasizing authorization boundaries. Capability inventory: The skill possesses capabilities for file modification and tool execution via sandbase_run. Sanitization: Security is maintained through mandatory human-in-the-loop verification (Quality Gates) and required user authorization before any live changes or paid API calls are performed.
Audit Metadata