self-feedback-loop

Pass

Audited by Gen Agent Trust Hub on Mar 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands for version control management (git status, git diff, git log) and identifies project-specific test runners from local configuration files like package.json, Makefile, or Gemfile to verify code fixes.
  • [PROMPT_INJECTION]: The skill demonstrates a surface for indirect prompt injection by processing external project documentation and implementation files. Ingestion points: Reads AGENTS.md, README.md, plan files in docs/plans/, and source code files. Boundary markers: No specific delimiters or instructions to disregard embedded commands are defined for the ingested data. Capability inventory: Includes file modification, git commits, and execution of shell-based test suites. Sanitization: The instructions do not specify validation or sanitization of the input data from project files before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 26, 2026, 02:04 AM