implement-team
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process implementation requirements from external files which could contain malicious instructions.
- Ingestion points: The skill reads data from
prd.md,spec.md, and markdown files located in.scratch/<feature>/issues/. - Boundary markers: The protocol uses "context hygiene" to minimize the amount of external data in the main prompt, opting to reference full ticket content by file path and summarizing events rather than inlining logs.
- Capability inventory: The skill has the capability to orchestrate sub-agents using the
/implementtool, perform Git repository checks, and write evidence logs to the local filesystem. - Sanitization: The skill mitigates risks through a mandatory "Confirmation Gate" where the user reviews the implementation plan before execution, and a "fail-closed" verification mechanism that validates agent commits and file changes against a baseline before unlocking dependent tasks.
Audit Metadata