Verify Skill
Pass
Audited by Gen Agent Trust Hub on Mar 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using the GitHub CLI (
gh) and Git. - It runs
gh auth statusto check user authentication state. - It performs external write operations via
gh api graphqlto submit verification reports to GitHub Discussions. - It executes
git committo persist corrections made to the local repository. - [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection (Category 8).
- Ingestion points: It reads the full content of other
SKILL.mdfiles and ingests untrusted user input during 'Experience Collection' and 'Test Scenario Construction'. - Boundary markers: The skill lacks explicit delimiters or instructions to ignore embedded commands when processing the content of the target skill.
- Capability inventory: The skill possesses file-write capabilities (modifying
SKILL.mdfiles), version control access (git commit), and network write access via the GitHub API. - Sanitization: No sanitization or validation is performed on the data ingested from the target skills or the user's test scenarios before it is processed or used to generate the final report.
Audit Metadata