skills/tddworks/asc-cli/improvement/Gen Agent Trust Hub

improvement

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill guides the agent to read existing source code to understand current behavior. This presents a surface for indirect prompt injection if the project code contains adversarial instructions designed to influence the agent.
  • Ingestion points: Step 1 of the workflow in SKILL.md requires reading existing code.
  • Boundary markers: No specific delimiters or safety instructions are defined for processing the code content.
  • Capability inventory: The skill performs file system read/write operations and executes shell commands (swift test, make docs).
  • Sanitization: No sanitization of the ingested code is described.
  • [COMMAND_EXECUTION]: The skill incorporates the execution of local shell commands as part of the verification and documentation process.
  • Evidence: The workflow utilizes swift test to run the test suite and make docs to update project documentation, which are standard operations for a Swift development environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 11:55 AM