Skills
Navigate
skills/uzysjung/uzys-agent-skills-conductor/goal-to-pr-execution/Gen Agent Trust Hub

goal-to-pr-execution

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill transforms user-provided goals into executable acceptance criteria commands, creating an indirect prompt injection surface. Ingestion points: User goal normalization in SKILL.md. Boundary markers: Absent. Capability inventory: Execution of verification commands via agent tools and local scripts using child_process. Sanitization: Absent.
  • [COMMAND_EXECUTION]: Local utility scripts use Node.js child_process.execFileSync and spawnSync to perform git operations and verify script runnability. Evidence is found in scripts/check-docs.js, scripts/validate-work-records.js, and scripts/portability-test.js.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 12:59 PM