synthesis-preflight
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill triggers the execution of local shell commands within SKILL.md to perform git operations (status, logs) and run the project's verification tools like test suites and type checkers. This is necessary for its primary function as a quality gate.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests data from external project sources. 1. Ingestion points: Git commit messages, branch names, and tool outputs from tests/type checkers referenced in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: Execution of shell commands for testing and repository management (referenced in SKILL.md). 4. Sanitization: Absent.
Audit Metadata