agent-task-lifecycle
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The workflow involves ingesting and acting upon data from potentially untrusted sources such as user requests and repository-local files.\n
- Ingestion points: User-defined goals and constraints (Step 1), repository-local instructions (Step 2), and route-required documentation (Step 6).\n
- Boundary markers: The instructions do not specify the use of delimiters or clear directives to the agent to treat external content as data rather than instructions, potentially leading to accidental obedience of embedded commands.\n
- Capability inventory: The skill utilizes subprocess execution via specific Python scripts and a launcher tool, and it performs repository-wide file operations (Steps 5, 15, and 22).\n
- Sanitization: There is no documentation of input validation or sanitization for external content before it is interpolated into prompts or command-line arguments.
Audit Metadata