implement
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface due to its reliance on external task descriptions.
- Ingestion points: Ingests untrusted content from PRDs and issue trackers to guide development (SKILL.md).
- Boundary markers: Absent; the skill does not use delimiters or instructions to ignore commands within the source text.
- Capability inventory: Instructs the agent to run code execution tools for testing and to commit changes to the branch, which could be misused (SKILL.md).
- Sanitization: Absent; no validation or sanitization of external documents is specified.
Audit Metadata