develop-contribution
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the agent to execute shell commands, including
uv sync,make contribution, andmake check, as part of the standard workflow for creating and verifying contributions. - [EXTERNAL_DOWNLOADS]: The skill uses the
uvtool to synchronize workspace dependencies, which involves downloading Python packages from the official PyPI registry. - [PROMPT_INJECTION]: The 'Reproduction' module (described in
references/reproduction.md) creates an indirect prompt injection surface by requiring the agent to process data from external sources. - Ingestion points: The agent is instructed to read external repository contents, specifically README files, configuration files, and environment files (
references/reproduction.md, steps 1 and 2). - Boundary markers: The instructions do not define explicit boundary markers or 'ignore' instructions for the external content processed by the agent.
- Capability inventory: The agent has the capability to write files to the local file system and execute shell commands via
uvandmake(SKILL.md). - Sanitization: No explicit sanitization or validation logic is defined for the external instructions; the skill relies on instructional guidance for the agent to 'Run only documented or clearly justified commands'.
Audit Metadata