correct
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from repository history, review comments, and external files to drive automated code and configuration modifications.
- Ingestion points: Recent commits, reverts, review comments, and the file
../orca-harness/SKILL.md. - Boundary markers: Absent. The instructions do not define delimiters or provide guidance for the agent to ignore potentially malicious instructions embedded in the analyzed data.
- Capability inventory: The agent is authorized to modify repository architecture, write source code, update CI/CD configurations (lints/tests), and commit changes to the repository.
- Sanitization: Absent. The skill does not implement validation or sanitization of the external text before it influences the agent's decision-making process.
- [DATA_EXFILTRATION]: The skill attempts to read a file (
../orca-harness/SKILL.md) using a relative path that traverses outside the current working directory, which could lead to unauthorized access to files depending on the environment's sandbox constraints.
Audit Metadata