grinding-until-pass
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run various shell commands like
npm test,npm run build, andnpx tscto verify code status. This is a core part of its intended functionality for automated development tasks. - [PROMPT_INJECTION]: The skill contains a surface for indirect prompt injection as it requires the agent to analyze and act upon output from external command executions. 1. Ingestion points: Command output captured during the execution phase (SKILL.md). 2. Boundary markers: None present. The instructions do not define delimiters for command output. 3. Capability inventory: The agent possesses file system write access and shell command execution capabilities. 4. Sanitization: No instructions for sanitizing or validating command output are provided.
Audit Metadata