testland/definition-of-done
Use for any question or task about a Definition of Done, including what one should include, checking a PR or story against it, and stories marked done that bounce back from QA. Drafts a starter DoD and a per-PR checklist, and audits work line by line against an existing DoD with repository evidence, never on self-attestation.
89%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Low
Low-risk findings worth noting
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The required audit workflow runs `gh pr view --json reviews,reviewDecision` and `statusCheckRollup` against GitHub pull requests, and reads linked issues, so outsider-authored PR and issue text can enter the agent's context without the agent selecting a specific item.
Where we found it
github.com
domain · 2 sites
The plugin instructs the agent to run `gh pr view --json reviews,reviewDecision` and `gh pr view --json statusCheckRollup` to fetch PR review data and CI status checks from GitHub, bringing outsider-authored PR content into the agent's context.
SKILL.md:198
SKILL.md:200
- Audited
- Security analysis