agentic-goals
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes durable goal state stored in JSON format, which includes user-provided objectives, constraints, and evidence. * Ingestion points: The agent is instructed to read and resume goal state from workspace files like
templates/goal.jsonandexamples/migration-goal.json. * Boundary markers: Uses a strict JSON schema and explicit instructions to separate goal tracking from ordinary task execution. * Capability inventory: The skill has the capability to write to the local workspace and execute validation scripts. * Sanitization: Thescripts/validate_goal.pyscript performs deep validation, rejecting non-finite numbers and duplicate keys, and enforcing type safety. - [DYNAMIC_EXECUTION]: The unit test script
scripts/test_validate_goal.pyuses dynamic loading to import validation logic for testing. * Evidence: Employsimportlib.util.spec_from_file_locationto load thescripts/validate_goal.pymodule from a relative file path. - [COMMAND_EXECUTION]: The skill executes its own bundled Python script to verify the integrity of goal contracts. * Evidence:
SKILL.mddirects the agent to usepython3 scripts/validate_goal.py <goal.json>to validate state before pursuit.
Audit Metadata