test-and-fix
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various bash commands to identify the project structure and git status. Evidence includes the use of
git branch,git symbolic-ref, and directory listing vials. - [COMMAND_EXECUTION]: Probes common development ports on localhost (3000, 4000, 8080, 5173) using
curlto verify the state of the running application. - [EXTERNAL_DOWNLOADS]: Synchronizes with the remote repository using
git fetch. - [PROMPT_INJECTION]: Identifies an indirect prompt injection surface through the processing of local project files and git logs.
- Ingestion points: The skill reads from
delivery-plan.md, dependency manifests, and git history. - Boundary markers: There are no explicit markers used to distinguish external data from the agent's internal instructions.
- Capability inventory: The skill is permitted to use
Bash,Read,Write,Edit, andGrep. - Sanitization: No specific sanitization or validation logic is applied to the content retrieved from processed files.
Audit Metadata