verify
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of local CLI tools
canonandorchestrato interact with a SQLite database and manage git worktrees. These operations are core to the skill's intended functionality for workflow automation. - [DYNAMIC_EXECUTION]: The skill executes shell commands defined in
verify_commandfields ofacceptancerecords viaorchestra check. While this allows execution of logic not contained within the skill itself, it is the documented method for running tests and verification scripts within the system. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from a local store (records) which influences its decision-making (e.g., assessing if a requirement is 'verified').
- Ingestion points: Records are read from the local SQLite store via
canon list,orchestra view, andorchestra briefcommands. - Boundary markers: The system uses structured data (JSON/NDJSON) and explicit schemas for all record exchanges.
- Capability inventory: The skill can execute shell commands via
orchestra check, update records viacanon apply, and commit changes viagit. - Sanitization: The skill relies on
canon validateto enforce schema compliance and uses revision tracking (--expected-revision) to prevent unauthorized or concurrent modifications.
Audit Metadata