loop
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of arbitrary shell commands through the
taskargument and the optional--checkparameter. These commands are executed by theloop-agentusing theBashtool. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-defined tasks and objectives that are subsequently passed to a background agent (
loop-agent). This background agent is granted extensive capabilities, including file modification and shell access. - Ingestion points: The
taskand--until(objective) arguments provided via the/loopcommand inSKILL.md. - Boundary markers: No explicit delimiters or boundary markers are defined when interpolating user inputs into the background agent's context.
- Capability inventory: The
loop-agent.mddefines access toBash,Write,Edit,Read,Grep, andGlobtools, enabling significant file system and system-level operations. - Sanitization: The instructions do not specify any validation, escaping, or filtering for the user-provided task or objective strings before execution.
- [DYNAMIC_EXECUTION]: The initialization process invokes a local Python script
scripts/cv_init_store.py. This script utilizessubprocess.runto executegitcommands (rev-parse) to determine repository paths and calculate a project slug for state management. It also performs file system operations including directory creation in the user's home directory and symlink creation within the repository.
Audit Metadata