factory-learn
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from external sources such as git history and workspace evidence files during its learning loops.
- Ingestion points: The skill reads git commit history and issue trackers for Change Decision Records (ChDRs) and scans session state/evidence files (
SKILL.md). - Boundary markers: The orchestrator utilizes a
hybridsupervision default with mandatory human gates enforced at theclarifystep and during final PR creation. - Capability inventory: Coordinates internal skills via the shared executor, interacts with the local file system in the
.adlc/directory, and manages repository PRs. - Sanitization: Implements interactive provenance reviews and approval gates to validate mined data before it is promoted to centralized directives.
Audit Metadata