implement-autonomously
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill explicitly directs the agent to "implement requirements on your own, without further human input" and to "Avoid stopping for user input if possible." This instruction encourages the agent to override standard interactive safety protocols and proceed without human-in-the-loop verification.\n- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by processing untrusted external requirements with high-privilege capabilities.\n
- Ingestion points: User-provided requirements, features, tasks, or tickets referenced in the implementation process (SKILL.md).\n
- Boundary markers: Absent; the skill lacks delimiters or instructions to ignore embedded commands within the processed data.\n
- Capability inventory: File system modification for code implementation and shell command execution for verification (tests and linters) through auxiliary skills like
/full-verification.\n - Sanitization: Absent; requirements are processed as instructions without validation, escaping, or filtering.\n- [COMMAND_EXECUTION]: The agent is instructed to run tests and linters (e.g., via
/find-verification-tools,/full-verification), which involves executing shell commands based on the project environment.
Audit Metadata