backlog-triage
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Git CLI commands (git status, git pull, git commit, git push) to automate version control for the vault files as part of its documented triage workflow.
- [DATA_EXFILTRATION]: The skill performs git push operations to synchronize vault changes with a remote repository. This network activity is a legitimate component of the skill's primary function.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by processing user-generated notes. Ingestion points: Reads and triages contents from Daily/backlog.md and recent daily notes. Boundary markers: The workflow does not include specific delimiters or instructions to disregard embedded commands within the files. Capability inventory: The skill can modify local files and push updates to a remote repository via Git. Sanitization: No validation or sanitization of the markdown content is performed prior to the reorganization process.
Audit Metadata