resolve-findings
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes "evaluated findings" which may originate from untrusted external data sources or prior analysis of external code. The interpolation of these findings into the agent's execution context creates a potential surface where malicious instructions embedded in the data could influence the agent's behavior during the implementation phase.
- Ingestion points: The skill ingests "evaluated findings" in Step 2 to be processed by the
/apply-findingsskill. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the skill definition.
- Capability inventory: The skill orchestrates multiple other skills (
/code-style,/apply-findings,/finalize) and utilizes task management tools (TaskCreate,TaskList) and user interaction (AskUserQuestion). - Sanitization: There is no evidence of content validation, escaping, or filtering of the findings data before it is acted upon.
Audit Metadata