check
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local CLI tools (
hackathon,git) to perform environment checks, configure Git identity, and manage application setup. These are standard operations within the scope of a hackathon development environment. - [INDIRECT_PROMPT_INJECTION]: The agent is instructed to read and interpret JSON output from external commands (
hackathon doctor,hackathon event status). - Ingestion points: Commands like
hackathon doctor --jsonandhackathon event status --jsoninSKILL.mdprovide external data to the agent. - Boundary markers: None explicitly defined for the JSON parsing.
- Capability inventory: Shell command execution for diagnostics and setup (e.g.,
hackathon setup) is present inSKILL.md. - Sanitization: None specified for the command outputs.
- [PRIVILEGE_ESCALATION]: The skill explicitly forbids the use of
sudo, ensuring that no unauthorized privilege escalation occurs through the agent's actions.
Audit Metadata