ar-resume
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows standard practices for developer-oriented tools. It interacts with the local file system and git repository within the expected scope of an experiment resume tool.
- [INDIRECT_PROMPT_INJECTION]: There is a potential attack surface where the skill reads data from external files (
program.mdandresults.tsv) that could contain untrusted content. However, the skill's current logic is limited to summarizing this data for the user, which is a low-risk operation. - Ingestion points: The skill reads
program.mdandresults.tsvinSKILL.md(Step 2). - Boundary markers: No explicit delimiters or safety instructions are used when reading these files.
- Capability inventory: The skill utilizes shell execution for
gitandpython(as seen inSKILL.md). - Sanitization: No explicit sanitization or validation of the file content is mentioned.
Audit Metadata