pipeline-progress
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project-level files to determine execution flow. It lacks explicit boundaries between data and instructions when reading project state.
- Ingestion points: The skill reads
00_project/HANDOFF.mdand00_project/pipeline_progress.jsonto initialize or resume workflows. - Boundary markers: There are no specific delimiters or warnings used when reading these files to prevent the agent from following embedded instructions.
- Capability inventory: The skill uses
python scripts/pipeline_progress.pyto perform state updates and file operations. - Sanitization: No sanitization or validation logic is described for the content ingested from the project files.
- [COMMAND_EXECUTION]: The skill's primary mechanism of action involves executing a local Python script (
scripts/pipeline_progress.py) with various arguments to manage project progress and checkpoints. This is the intended behavior for the skill's workflow management purpose.
Audit Metadata