ts-workflow-implement-review
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting untrusted user data (source requests and developer feedback) and interpolating it into prompts for sub-agents (Implementation and Review Judges).
- Ingestion points: User-provided content is ingested in the
CREATE_LOG(Source request) andHANDLE_DEVELOPER_FEEDBACK(Change requests) sections. - Boundary markers: The skill lacks explicit boundary markers or instructions for the sub-agents to ignore embedded commands within the
source requestordeveloper feedbackfields when they are passed into the judges' task inputs. - Capability inventory: The dispatched sub-agents utilize
ts-implementandts-review, which possess capabilities to modify the file system and perform code changes. - Sanitization: No sanitization, escaping, or filtering of user-provided strings is performed before they are processed by the sub-agent judges.
- [COMMAND_EXECUTION]: The skill uses local shell commands to establish a workflow baseline.
- Evidence: The skill executes
git statusandgit HEADduring theCREATE_LOGphase to record the starting state of the repository.
Audit Metadata