worker-protocol
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- Indirect Prompt Injection (SAFE): The protocol processes data from GitHub issues. Evidence Chain: 1. Ingestion points: Startup checklist reads issue and comments. 2. Boundary markers: Absent for input; specific markers used for output. 3. Capability inventory: Bash, Write, mcp__github__*. 4. Sanitization: Enforced via mandatory review gates.
- Command Execution (SAFE): Use of Bash is restricted to environment verification and testing routines.
Audit Metadata