implement
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to implement work based on external user-provided specifications or tickets, which serves as an ingestion point for untrusted data.
- Ingestion points: External specifications and tickets (SKILL.md).
- Boundary markers: The skill lacks explicit delimiters or instructions to ignore potential commands embedded within the specs/tickets.
- Capability inventory: The agent is authorized to modify files (implementing code) and execute shell commands (regularly running tests and typechecking).
- Sanitization: There are no specified mechanisms for sanitizing or validating the input data before processing.
Audit Metadata