verification-before-completion
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: No security threats were detected in the skill instructions. The content focuses entirely on enforcing development best practices such as running tests, linters, and build commands before reporting status.
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and analyze output from external tools (tests, linters). 1. Ingestion points: The agent is instructed to read 'Full output' from verification commands (SKILL.md). 2. Boundary markers: No specific boundary markers or 'ignore' instructions are provided for the command output processing. 3. Capability inventory: The skill assumes the agent can execute shell commands (tests, builds, linter) and read their output. 4. Sanitization: No sanitization is specified for the ingested tool output. Note: This constitutes an inherent attack surface for development agents but is standard for the described workflow.
Audit Metadata