concierge
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Node.js and Bash scripts for identity reporting and data retrieval. It specifically invokes
node scripts/identity-report.mjsduring initialization to verify the tenant and host environment. It also utilizes standard CLI tools includinglinearis,gh,git, andsqlite3to interact with the project management environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data by reading and acting upon human comments and requests from Linear tickets and status boards.
- Ingestion points: Human comments on tickets and requests for project scaffolding are processed by the agent (identified in
SKILL.mdloop andreferences/scaffold.md). - Boundary markers: The instructions do not define specific delimiters or warnings to ignore potentially malicious instructions embedded in the user-provided text.
- Capability inventory: The skill has the capability to write to local files (handoffs, event logs), interact with the Linear API via CLI, and launch new agent roles via a supervisor.
- Sanitization: The skill uses
jqwithin its Bash helpers (scripts/lib/canonical-event.sh) to ensure that telemetry data is safely formatted as JSON.
Audit Metadata