full-verification

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process the full output of linters and test runners to autonomously fix reported failures, creating a surface for indirect prompt injection.
  • Ingestion points: Raw output from testing and linting tools such as Rubocop and Rake as specified in SKILL.md.
  • Boundary markers: The instructions do not define boundary markers or include directives to ignore instructions potentially embedded in the tool output.
  • Capability inventory: The skill authorizes shell command execution (bundle exec, rake, gh, glab) and file modifications across the codebase.
  • Sanitization: No sanitization or validation of tool output is specified before the agent acts on the information to perform batch edits.
  • [COMMAND_EXECUTION]: The skill directs the agent to execute various command-line tools for linting, testing, and repository management, which is consistent with the primary purpose of verifying a codebase.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 10:07 AM
Security Audit — agent-trust-hub — full-verification