verify-ui-change-in-cloud
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
git remote get-url originto verify that the current directory belongs to thewarpdotdev/warprepository before initiating any cloud-based actions.\n- [REMOTE_CODE_EXECUTION]: The skill uses therun_agentstool to spawn a cloud agent with computer use capabilities. This agent is instructed to clone the repository and build the application to verify UI changes. This behavior is the primary intended function of the skill and is managed within the vendor's infrastructure.\n- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it interpolates user-provided verification tasks into the cloud agent's base prompt.\n - Ingestion points:
SKILL.md(Workflow Step 4: Write an Effective Prompt)\n - Boundary markers: Absent. The skill does not define specific delimiters to separate user instructions from the system prompt.\n
- Capability inventory:
run_agentstool (spawns cloud agent with shell access and computer use).\n - Sanitization: Absent. The skill provides examples for users but does not describe programmatic sanitization of the input.
Audit Metadata