ticket-compound

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local system commands including git log, git diff, and rg (ripgrep) to gather data from the repository history and file system. It also executes a local bash script scripts/compound/validate-learnings.sh to validate YAML frontmatter in generated markdown files.
  • [INDIRECT_PROMPT_INJECTION]: The skill represents an attack surface for indirect prompt injection as it ingests and analyzes untrusted external data, specifically git diff outputs and friction notes generated by other agents. Malicious instructions embedded in these sources could potentially influence the logic of the sub-agents spawned via the Task tool to analyze context and extract solutions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 09:29 PM
Security Audit — agent-trust-hub — ticket-compound