develop-contribution

Pass

Audited by Gen Agent Trust Hub on Jun 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructions direct the agent to execute shell commands, including uv sync, make contribution, and make check, as part of the standard workflow for creating and verifying contributions.
  • [EXTERNAL_DOWNLOADS]: The skill uses the uv tool to synchronize workspace dependencies, which involves downloading Python packages from the official PyPI registry.
  • [PROMPT_INJECTION]: The 'Reproduction' module (described in references/reproduction.md) creates an indirect prompt injection surface by requiring the agent to process data from external sources.
  • Ingestion points: The agent is instructed to read external repository contents, specifically README files, configuration files, and environment files (references/reproduction.md, steps 1 and 2).
  • Boundary markers: The instructions do not define explicit boundary markers or 'ignore' instructions for the external content processed by the agent.
  • Capability inventory: The agent has the capability to write files to the local file system and execute shell commands via uv and make (SKILL.md).
  • Sanitization: No explicit sanitization or validation logic is defined for the external instructions; the skill relies on instructional guidance for the agent to 'Run only documented or clearly justified commands'.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 19, 2026, 02:02 PM
Security Audit — agent-trust-hub — develop-contribution