kata-status-report
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands including
git status,git branch,git worktree, andgit rev-parseto inspect the local environment. These commands are used strictly for status reporting as defined in the instructions, which explicitly forbid modifications to files, branches, or worktrees. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local repository metadata (branch names, file paths, and worktree lists). While this creates a potential surface for indirect prompt injection if a repository contains maliciously named branches or files, the risk is mitigated by the skill's strict instructions to only report information and avoid executing tests, builds, or any modification commands.
Audit Metadata