skill-system-tkt
Warn
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
tkt.shscript executes shell commands extracted from theacceptance_criteriafield of ticket YAML files. This is performed usingsubprocess.runwithshell=Truewithin an embedded Python block.\n- [COMMAND_EXECUTION]: Thetickets.pyscript executes system commands viasubprocess.runfor managinggitworktrees and runningpytestas part of the ticket closure process.\n- [PROMPT_INJECTION]: The skill ingests data from user-controllable Markdown files (note/note_tasks.md) intickets.pyto populate ticket titles and summaries. Evidence: Ingestion points arenote/note_tasks.md; boundaries are Markdown headers; capabilities include shell command execution intkt.shandtickets.py; sanitization is absent beyond regex extraction.\n- [REMOTE_CODE_EXECUTION]: Thetickets.pyandtest_tickets.pyscripts perform dynamic module loading usingimportlib.utilto execute local Python scripts includingerrors.pyandmem.py.
Audit Metadata