new-module
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill processes user-provided descriptions and module names that are interpolated into file content and subagent prompts. This is necessary for the skill's function but represents an input surface.\n
- Ingestion points: $ARGUMENTS and generated specification files.\n
- Boundary markers: Absent.\n
- Capability inventory: File system writes, shell commands (git, just, gh), and subagent spawning.\n
- Sanitization: Not specified.\n- [COMMAND_EXECUTION]: The skill uses shell commands for development tasks such as Git branch management and executing the just build runner for compilation and validation. These are standard operations for the tool's intended purpose.
Audit Metadata