freeze
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions define a benign administrative process for managing decision-making cooldowns. No network operations, obfuscation, or malicious command execution patterns were detected.- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for indirect prompt injection as it reads and acts upon external 'decision records' (markdown files). * Ingestion points: The workflow involves reading files from a user-provided '' (SKILL.md). * Boundary markers: There are no explicit markers or instructions to isolate the content of the records from the agent's primary logic. * Capability inventory: The agent performs file system writes to update decision statuses and an index file at '~/.claude/freezes/active.md' (SKILL.md). * Sanitization: No sanitization or verification of the ingested file content is specified.
Audit Metadata