sdlc-validate-implementation
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could contain malicious instructions designed to influence the agent's validation logic or output.
- Ingestion points: Reads intent.md, spec.md, plan.md, and repository state/changes (SKILL.md).
- Boundary markers: Absent; no specific delimiters or warnings to ignore instructions within the input files are defined.
- Capability inventory: The agent is instructed to run tests, builds, static checks, and integration checks (implies shell/subprocess execution); it also has write access to plan.md and pr-summary.md (SKILL.md).
- Sanitization: Absent; no mention of escaping or filtering content from the input artifacts.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute builds, tests, and static checks based on the repository state. While expected for validation, this allows for the execution of arbitrary code defined within the repository.
- [DYNAMIC_EXECUTION]: Instructions to run 'relevant tests, builds, static checks, integration checks, or contract checks' involve the dynamic execution of scripts or binaries found within the repository being validated.
Audit Metadata