improve
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill requires the agent to ingest and analyze session context, including potentially untrusted data from command outputs and error logs, which is a vector for indirect prompt injection.
- Ingestion points: The workflow step 1 specifically directs the agent to review 'files changed, commands run, errors encountered' during the session.
- Boundary markers: The skill does not implement specific delimiters or instructions to ignore potential commands embedded within the reviewed session data.
- Capability inventory: The skill is designed for an agent environment that typically possesses shell execution and file system modification capabilities.
- Sanitization: The instructions do not define requirements for filtering or sanitizing the ingested session history before analysis.
Audit Metadata