recipe-implement

Pass

Audited by Gen Agent Trust Hub on Mar 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill operates as an orchestrator that requires explicit user confirmation at specific stopping points before proceeding with automated actions.
  • [COMMAND_EXECUTION]: The skill performs git commit operations via Bash, which is a standard component of its intended implementation lifecycle and is gated by manual approval.
  • [PROMPT_INJECTION]: The skill processes user input via the $ARGUMENTS variable to determine workflow steps. Potential indirect injection is mitigated through mandatory system constraint suffixes for all sub-agents and human-in-the-loop checkpoints. Ingestion points: $ARGUMENTS variable in Situation Assessment. Boundary markers: Mandatory [SYSTEM CONSTRAINT] suffix for all sub-agent prompts. Capability inventory: Git command execution, task creation/updates, and sub-agent invocation. Sanitization: No explicit sanitization or filtering of the argument string is defined.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 13, 2026, 11:03 AM