ticket-compound
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local system commands including
git log,git diff, andrg(ripgrep) to gather data from the repository history and file system. It also executes a local bash scriptscripts/compound/validate-learnings.shto validate YAML frontmatter in generated markdown files. - [INDIRECT_PROMPT_INJECTION]: The skill represents an attack surface for indirect prompt injection as it ingests and analyzes untrusted external data, specifically
git diffoutputs andfrictionnotes generated by other agents. Malicious instructions embedded in these sources could potentially influence the logic of the sub-agents spawned via theTasktool to analyze context and extract solutions.
Audit Metadata