software-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill permits and encourages the execution of specific development commands for repository analysis and verification.
- Evidence: The instructions explicitly allow 'git status' and 'git diff' for repository state analysis (SKILL.md).
- Evidence: The workflow requires running CI checks such as type checking, testing, and linting before staging changes (references/implementation-workflow.md).
- [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to analyze and act upon potentially untrusted repository data, creating an attack surface for indirect prompt injection.
- Ingestion points: The agent is instructed to analyze codebase structure, specifications in 'docs/' or 'specs/', and documentation files like 'README.md' (SKILL.md).
- Boundary markers: The skill mandates 'Stop and ask' checkpoints and a 'Fact-based approach' to reduce risks from uncertain input (SKILL.md).
- Capability inventory: The skill enables the agent to edit files, run CI tooling (tests, linters), and execute Git analysis commands (SKILL.md, references/workflow-patterns.md).
- Sanitization: The instructions do not define explicit sanitization or filtering logic for the repository content encountered during processing.
Audit Metadata