devtu-code-optimization
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the execution of several shell commands to validate code quality and functionality. These include
ruff checkfor linting,python -cfor verifying imports, and a project-specifictooluniverse.clifor executing tool logic with provided arguments. - [EXTERNAL_DOWNLOADS]: The workflow incorporates
git fetchandgh pr viewcommands to interact with the remote repository on GitHub. These operations are used to synchronize state and verify pull request status within themims-harvard/ToolUniverserepository. - [PROMPT_INJECTION]: The skill includes a testing phase that processes
real_args_jsonvia a CLI tool, which introduces a surface for indirect prompt injection. If the data passed to the CLI is sourced from untrusted external inputs, it could potentially influence the agent's behavior during the execution of the tool tests. - Ingestion points: The
<real_args_json>input field used in thetooluniverse.cli runcommand. - Boundary markers: No delimiters or specific safety instructions for argument interpolation are mentioned.
- Capability inventory: The agent has the capability to execute subprocesses (Python, Git, GitHub CLI) and perform file system operations.
- Sanitization: The provided instructions do not specify any validation or sanitization routines for the data used in CLI tests.
Audit Metadata