implement
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon untrusted data from the repository environment, creating a surface for indirect prompt injection attacks.
- Ingestion points: In
SKILL.md(Step 1), the agent is instructed to read "repository instructions and the settled source artifact" to guide its implementation process. - Capability inventory: The skill allows the agent to modify files within an authorized scope and execute "authoritative verification commands" (such as tests, typecheckers, and linters) which typically involve shell command execution.
- Boundary markers: The skill does not define explicit delimiters or instructions to ignore potential commands embedded within the external repository instructions or source artifacts.
- Sanitization: No sanitization, validation, or filtering of the content retrieved from these external files is specified before the agent processes them.
Audit Metadata