verification-loop
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard development commands such as
npm run build,npm run test,npx tsc, andgit diffto assess project health. - [SAFE]: The skill includes a proactive security phase that uses
greplocally to identify potential hardcoded secrets (e.g., API keys with thesk-prefix) and unintended debug logs in the source code. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it reads and processes external data (tool outputs, test results, and file diffs) which could contain adversarial instructions intended to misguide the agent's summary.
Audit Metadata