full-verification
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process the full output of linters and test runners to autonomously fix reported failures, creating a surface for indirect prompt injection.
- Ingestion points: Raw output from testing and linting tools such as Rubocop and Rake as specified in
SKILL.md. - Boundary markers: The instructions do not define boundary markers or include directives to ignore instructions potentially embedded in the tool output.
- Capability inventory: The skill authorizes shell command execution (
bundle exec,rake,gh,glab) and file modifications across the codebase. - Sanitization: No sanitization or validation of tool output is specified before the agent acts on the information to perform batch edits.
- [COMMAND_EXECUTION]: The skill directs the agent to execute various command-line tools for linting, testing, and repository management, which is consistent with the primary purpose of verifying a codebase.
Audit Metadata