agent-notes
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run several local project scripts using
pnpm(e.g.,pnpm agent-notes:check-transition,pnpm docs:check-notes,pnpm change:scope) and GitHub CLI-based tools (gh-create-pr,gh-stack). These are standard development operations for validating documentation and managing pull request workflows within the repository. - [INDIRECT_PROMPT_INJECTION]: The skill processes human-authored notes and pull request content to classify changes and update metadata. While this represents an ingestion surface for potentially untrusted data, the agent's capabilities are restricted to executing project-specific validation scripts and repository management commands, which are consistent with its intended purpose.
- [REMOTE_CODE_EXECUTION]: The skill mentions external tools like
gh-stack, which are used for managing stacked pull requests. These are standard developer tools and their use here is documented for legitimate workflow management within the project's ecosystem.
Audit Metadata