implement
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data from external sources such as Project Requirement Documents (PRDs) or issue trackers, which presents a surface for indirect prompt injection.
- Ingestion points: The agent ingests data from user-provided PRDs and issues (SKILL.md).
- Boundary markers: No specific delimiters or safety markers are instructed to separate user-provided documentation from the agent's core instructions.
- Capability inventory: The skill utilizes tools for code generation, type-checking, test execution, and git commits.
- Sanitization: There are no instructions to sanitize or validate the content of the ingested documents before execution.
Audit Metadata