capability-map
Warn
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill creates a local shell script at
scripts/capability-map.shfrom internal assets and useschmod +xto grant it execution permissions. - [DYNAMIC_EXECUTION]: The skill generates and executes a bash script (
capability-map.sh) to perform documentation checks and update the capability table inCLAUDE.mdorAGENTS.mdusing the--fixflag. - [COMMAND_EXECUTION]: The skill modifies project configuration files (e.g.,
package.json) and CI/CD workflow files (such as.github/workflows/or.gitlab-ci.yml) to add automated execution of the validation script. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, including meeting notes, product descriptions, and glossary files, to generate its drafts.
- Ingestion points: Documented in
SKILL.md(Step 2 and 3) andreferences/subagent-brief.mdwhere external sources are read into the session context. - Boundary markers: The instructions lack specific delimiters or sanitization requirements for the content ingested from client documents before being processed by subagents.
- Capability inventory: The skill has the capability to write files, execute shell scripts, and modify critical CI/CD pipeline configurations.
- Sanitization: No explicit sanitization or escaping mechanisms are implemented for the external content before it is interpolated into the mapping process.
Audit Metadata