day-job-founder
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes an initialization script (
scripts/init.py) that scaffolds a local directory with markdown templates for project management. The script performs standard file system operations and does not require network access or sensitive permissions. - [INDIRECT_PROMPT_INJECTION]: The skill recovers project context by reading user-controlled markdown files (e.g.,
RESUME.md). This provides an attack surface where malicious content in those files could influence agent behavior. - Ingestion points: Files in the
.mechanisms/directory within the project workspace. - Boundary markers: The agent is instructed to look for specific markdown headers and templates but lacks explicit boundary delimiters to ignore potential instructions embedded within the text.
- Capability inventory: The skill can execute a local Python script for setup and perform file read/write operations.
- Sanitization: There is no explicit sanitization or filtering of the file content before it is processed by the agent.
Audit Metadata