sdlc-validate-implementation
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from markdown files within the repository to guide its validation logic, creating a risk that malicious instructions in those files could influence the agent.
- Ingestion points: The skill explicitly requires
intent.md,spec.md, andplan.mdas inputs. - Boundary markers: Absent; the instructions do not provide delimiters or warnings to the agent to distinguish between the skill's instructions and the content of the data files.
- Capability inventory: The skill has the capability to inspect repository state, run builds, execute tests, and modify
plan.md. - Sanitization: Absent; there is no guidance on validating or escaping the contents of the input files before processing.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell-level operations, including running builds, integration tests, and static checks. This represents a significant capability that acts upon the code and artifacts present in the repository.
Audit Metadata