aiox-develop-story
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill designates a markdown file (
.aiox-core/development/tasks/dev-develop-story.md) as the 'Task Source of Truth' and instructs the agent to 'Load and execute the develop task end-to-end'. This architecture allows instructions embedded within the task data to drive agent actions. - Ingestion points: Path provided via
$ARGUMENTS[0]pointing to a local markdown file. - Boundary markers: Absent; the skill does not define delimiters to separate the task data from system instructions.
- Capability inventory: The agent is authorized to modify local files, perform git commits, and execute project scripts (
npm run lint,npm run typecheck,npm test). - Sanitization: None; the skill assumes the task file content is safe and authoritative.
Audit Metadata