skill-system-tkt

Warn

Audited by Gen Agent Trust Hub on Apr 11, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The tkt.sh script executes shell commands extracted from the acceptance_criteria field of ticket YAML files. This is performed using subprocess.run with shell=True within an embedded Python block.\n- [COMMAND_EXECUTION]: The tickets.py script executes system commands via subprocess.run for managing git worktrees and running pytest as part of the ticket closure process.\n- [PROMPT_INJECTION]: The skill ingests data from user-controllable Markdown files (note/note_tasks.md) in tickets.py to populate ticket titles and summaries. Evidence: Ingestion points are note/note_tasks.md; boundaries are Markdown headers; capabilities include shell command execution in tkt.sh and tickets.py; sanitization is absent beyond regex extraction.\n- [REMOTE_CODE_EXECUTION]: The tickets.py and test_tickets.py scripts perform dynamic module loading using importlib.util to execute local Python scripts including errors.py and mem.py.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 11, 2026, 12:55 AM