implement
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data from user-supplied specifications and tickets, which could contain instructions intended to influence the agent's behavior.
- Ingestion points: External data enters the context through "spec or tickets" referenced in
SKILL.md. - Boundary markers: The skill lacks explicit instructions or delimiters to isolate user-provided specifications from its core logic.
- Capability inventory: The skill possesses the capability to execute tests, perform typechecking, and commit code to the current branch, as seen in the instructions in
SKILL.md. - Sanitization: There is no evidence of sanitization or validation logic applied to the input specifications or tickets.
Audit Metadata