senior-developer

Pass

Audited by Gen Agent Trust Hub on Mar 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a Bash tool to execute standard Python development and version control utilities.
  • Evidence: The instructions specify the use of ruff, mypy, pytest, coverage, and git commands.
  • Context: These tools are used for their intended purpose of maintaining code quality, testing, and managing source code state within a development workflow.
  • [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection due to its analysis of external data and files.
  • Ingestion points: The skill reads existing codebase files (SKILL.md), architectural documentation (.architecture/context.md), and receives YAML task specifications and algorithm handoffs from other agents.
  • Boundary markers: Absent. There are no instructions to use specific delimiters or to disregard instructions contained within the analyzed files or specifications.
  • Capability inventory: The skill has access to the Write tool for file system modifications and the Bash tool for shell command execution.
  • Sanitization: Absent. The skill does not describe any validation or sanitization of the content ingested from the codebase or external specifications to prevent the execution of malicious instructions embedded in that data.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 20, 2026, 01:18 PM