start-my-week
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the 'simple-git' library to interact with the local repository, performing operations such as adding files and creating commits within the project workspace.
- [DATA_EXFILTRATION]: The skill is designed to synchronize local planning documents with a remote Git repository using 'git push'. This involves transmitting user-generated content from the 'docs/' directory to the configured 'origin' remote.
- [PROMPT_INJECTION]: The skill identifies and processes 'status signals' from user-created markdown files located in 'docs/corpus/'. This data ingestion surface presents a minor risk for indirect prompt injection if the source files contain adversarial instructions.
- Ingestion points: reads from
docs/corpus/**/*.mdanddocs/dashboard/visions/via thereadContextandreadCorpusSignalsfunctions. - Boundary markers: Uses specific YAML markers
# AI-WEEK-PLAN-STARTand# AI-WEEK-PLAN-ENDto delineate generated content. - Capability inventory: File system write access via
writeFileSynctodocs/dashboard/and network capability viasimple-gitpush. - Sanitization: Lacks explicit sanitization of text ingested from the corpus before it is processed by the assistant for summary generation.
Audit Metadata