implement-improvements
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes improvement entries from
.turbo/improvements.md, which acts as an external data source. - Ingestion points: The file
.turbo/improvements.mdis parsed inSKILL.mdStep 1 to extract summaries, types, and categories. - Boundary markers: Data is structured using Markdown headers (
###) and specific metadata fields (Type, Category, Where, Why). - Capability inventory: The skill uses shell commands for repository path resolution and delegates task execution to other specialized skills (
$implement,$investigate,$turboplan). - Sanitization: While there is no explicit string escaping, the skill mandates a 'Validate and Classify' phase (Step 2) where the agent must confirm the existence of issues by reading the actual source code, significantly reducing the risk of accidental obedience to malicious instructions in the backlog.
- [COMMAND_EXECUTION]: The skill utilizes
git rev-parseto accurately resolve the repository root and detect linked worktrees. These are standard, benign operations for a developer tool intended to work within a Git repository.
Audit Metadata