weekly-report
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Git commands using
subprocess.runinsrc/git_analyzer.py. These calls use list-based arguments instead of shell strings, effectively preventing command injection vulnerabilities.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Git commit messages, which creates a surface for indirect prompt injection.\n - Ingestion points: Commit messages are ingested from the output of
git loginsrc/git_analyzer.py.\n - Boundary markers: The skill does not use explicit boundary markers or delimiters when presenting commit data to the agent, increasing the risk that the agent might follow instructions embedded in a commit message.\n
- Capability inventory: The skill has file-system access (Read/Write) to the
~/.weekly-reports/directory and can execute Git and Python commands through the agent's shell tools.\n - Sanitization: There is minimal sanitization;
src/report_generator.pytruncates commit summaries to 20 characters and removes conventional commit prefixes, which may truncate but does not eliminate malicious payloads.
Audit Metadata