skills/wihlarkop/proofcraft/continue/Gen Agent Trust Hub

continue

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill defines a robust methodology for context reconstruction that prioritizes observable repository state (git, working tree, source code) over narrative summaries. This evidence-based approach promotes accuracy and reduces reliance on potentially manipulated or stale secondary sources.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data including git history, PR evidence, and repository documentation (Ingestion points: SKILL.md, reality-check.md). While this represents a surface for indirect prompt injection, the skill explicitly mandates 'Reality Check' and 'Reconciliation' phases (Boundary markers/Sanitization: SKILL.md workflow step 1, reconcile.md) to verify claims against implementation ground truth. The agent uses its repository access tools to collect direct evidence (Capability inventory: evidence.md, reality-check.md), providing a significant defense-in-depth against malicious instructions embedded in project metadata or history.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 12:56 PM