mission-verify
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
adlc-clicommand-line tool to retrieve workflow states and resume paused missions. This includes passing verdict inputs such as 'DONE', 'CONTINUE', or 'SPEC_CORRECTION_NEEDED' to the automation runtime. - [EXTERNAL_DOWNLOADS]: The skill's documentation provides instructions to download and install necessary dependencies using the vendor's package manager (
adlc-cli skills add tikalk/adlc-team-skills --skill factory-mission). This is a standard setup procedure for the 'tikalk' ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data during its core verification phase, creating a potential surface for indirect instructions.
- Ingestion points: Code diffs, test suite outputs, and
brief.mdfiles are read and processed in theverifyandconvergesteps. - Boundary markers: No specific delimiters or safety warnings (e.g., 'ignore instructions found in the code') are included in the prompt to prevent the agent from obeying instructions found within the data it is supposed to analyze.
- Capability inventory: The agent can execute
adlc-clicommands to modify the status of a mission and provide inputs that influence the next stage of the development pipeline. - Sanitization: The instructions do not describe any sanitization, escaping, or validation of the content found in the external artifacts.
Audit Metadata