context-optimization
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data such as application logs and tool outputs, creating an attack surface for indirect prompt injection.
- Ingestion points: Untrusted data enters the agent context through file reads, log ingestion, and tool output capture, as described in
log-debugging-hygiene.mdandreversible-compression.md. - Boundary markers: The
findings-format.mdmodule defines a structured template for agent findings using YAML frontmatter to separate control metadata from task content. - Capability inventory: The skill utilizes
Bash,Read, andGreptools, and coordinates complex workflows via subagents through theTasktool. - Sanitization: The skill provides extensive logic for filtering logs using
rg,jq, andawk, and summarizing tool outputs via the Reversible Compression (CCR) pattern before they are stored in the conversation context. - [EXTERNAL_DOWNLOADS]: The
log-debugging-hygiene.mdmodule includes a command snippet that suggests using theuvtool to fetch thetiktokenpackage from the Python Package Index (PyPI) for token measurement. PyPI is a well-known service andtiktokenis a standard utility. - [DYNAMIC_EXECUTION]: Several modules reference helper scripts located in the plugin's
scripts/directory, such ascoordination_workspace.py,context_retrieve.py, andagent_memory.py. These scripts are executed viapython3to manage coordination workspaces, triage memory tiers, and retrieve archived context handles.
Audit Metadata