sync
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [PROMPT_INJECTION]: The skill uses behavioral constraints to override default agent interaction patterns, specifically instructing the agent to ask "no questions" and use "no narration" to minimize delay.
- [COMMAND_EXECUTION]: The skill invokes an external tool named
session_capability_inventoryduring the extended sync process to regenerate project inventory data. - [DATA_EXFILTRATION]: The skill possesses an indirect prompt injection surface by reading and processing local file content without explicit sanitization or boundary markers.
- Ingestion points: Reads
CLAUDE-capability-inventory.md,MEMORY.md, and various session logs. - Boundary markers: None present; the skill treats file content as direct input for its summary generation.
- Capability inventory: The skill has the capability to write to multiple files in the
session-context/directory andMEMORY.md. - Sanitization: No sanitization or validation of the ingested file content is performed before interpolation into the output summary.
Audit Metadata