assay
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of Markdown instructions and YAML configuration. It contains no executable code (such as Python, JavaScript, or Bash scripts), which inherently limits its ability to perform malicious operations.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and evaluate external data such as code diffs and task breakdowns, creating a potential surface for indirect prompt injection.
- Ingestion points: Ingests changesets, task breakdowns, and code diffs as described in the Execution Protocol (SKILL.md).
- Boundary markers: The skill defines a 'Canonical Output Contract' for its own output but does not specify boundary markers or 'ignore' instructions for the data it processes.
- Capability inventory: The skill does not define any shell commands, network operations, or file system modifications.
- Sanitization: No sanitization or validation of the input diffs or tasks is implemented.
- [SAFE]: The execution protocol focuses on architectural integrity and 'Operational Hygiene,' explicitly instructing the agent to detect unredacted secrets and resource leaks. No suspicious commands or exfiltration patterns were detected.
Audit Metadata