strengthen
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands to facilitate its workflow, including
npx vigiles generate typesfor discovery, andnpm run buildandnpx vigiles compilefor verifying that modifications do not break the project build. - [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection because it reads and processes external data that could be controlled by an attacker (e.g., via a malicious pull request).
- Ingestion points: The agent reads the contents of
**/*.md.spec.tsfiles and documentation files located in../linter-docs/to find and match rules. - Boundary markers: The instructions do not specify the use of delimiters or specific markers to prevent the agent from following instructions that might be embedded within the project's specification or documentation files.
- Capability inventory: The skill has significant capabilities, including executing shell commands via
npm/npx, modifying source code and configuration files, and committing changes to the repository. - Sanitization: There is no evidence of sanitization, filtering, or validation of the content ingested from the external markdown and specification files.
Audit Metadata