implement
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data provided by users in the form of specifications or tickets, which creates a potential surface for indirect prompt injection.
- Ingestion points: External data enters the agent context via user-provided specs or tickets as described in
SKILL.md. - Boundary markers: The instructions do not define explicit delimiters or include warnings to ignore instructions embedded within the processed specs.
- Capability inventory: The skill utilizes capabilities for running tests, typechecking, code review, and committing changes to the current branch.
- Sanitization: There is no evidence of sanitization, validation, or filtering of the content provided in the specs or tickets.
Audit Metadata