research
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local build and test commands (e.g., project test suite) during the 'Self-Healing Validation' phase to ensure fixes or changes do not break existing functionality.
- [EXTERNAL_DOWNLOADS]: Phase 3 performs web searches to aggregate user feedback from the App Store, GitHub issues, and social platforms like Reddit and HackerNews.
- [PROMPT_INJECTION]: The skill is exposed to Indirect Prompt Injection because it ingests untrusted data from external web sources and processes it to synthesize ideas and validate fixes. * Ingestion points: Phase 3 (App Store reviews, GitHub issues, community signals). * Boundary markers: Absent; there are no explicit delimiters or instructions to ignore embedded commands in the scraped data. * Capability inventory: File system writes to the 'docs/' directory, invocation of sub-skills (/compete, /new-features), and execution of local shell commands for testing. * Sanitization: None; feedback is processed as raw text and summary statistics.
Audit Metadata