day4-wrap-and-analyze
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill executes 'npx skills add ai-native-camp/camp-2' to install educational resources from the official vendor repository.
- [COMMAND_EXECUTION]: The instructions guide the user to run shell commands including 'npx', 'curl', and 'jq' for environment setup and retrieval of documentation.
- [INDIRECT_PROMPT_INJECTION]: The 'fetch-tweet' and 'content-digest' components process untrusted data from external X (Twitter) URLs via the fxtwitter service. 1. Ingestion points: External URLs provided to fetch-tweet in 'references/block5-content-experience.md'. 2. Boundary markers: None identified in the prompt templates. 3. Capability inventory: Shell command execution (npx, curl) and file system writes (compound skill). 4. Sanitization: No specific filtering or validation logic is documented.
- [DATA_EXFILTRATION]: The 'history-insight' skill accesses sensitive session log files located in '~/.claude/projects/' to analyze user activity and extract project patterns.
Audit Metadata