implement
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided content which could contain hidden instructions intended to influence the agent.
- Ingestion points: The instructions refer to a "spec or set of tickets" provided by the user in SKILL.md.
- Boundary markers: Absent; there are no explicit delimiters or instructions to ignore commands embedded within the user data.
- Capability inventory: The skill has the capability to run tests, perform typechecking, and commit code changes as described in SKILL.md.
- Sanitization: Absent; the skill does not specify any validation or filtering of the external content.
Audit Metadata