lint
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to run Ruby linting tools (standardrb, erblint) and security scanners (brakeman). These are standard operations for the stated purpose of code quality enforcement.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes external Ruby and ERB files that could contain malicious instructions designed to influence the agent.
- Ingestion points: Reads and analyzes Ruby and ERB files as specified in the workflow.
- Boundary markers: None present; the skill does not use delimiters to separate untrusted file content from its own instructions.
- Capability inventory: The agent can execute shell commands via bundle exec and bin/brakeman, and it has the ability to commit changes to the repository.
- Sanitization: No evidence of sanitization or validation of the input files before analysis or tool execution.
Audit Metadata