portfolio-communicate
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to run validation scripts, resolving the plugin's root directory dynamically via shell commands (
ls -td) targeting the user's plugin cache. This behavior is used to find internal tools likevalidate-entities.shandproject-status.sh.- [PROMPT_INJECTION]: Ingests and processes untrusted project data (JSON files) which are transformed into documentation by sub-agents, creating a surface for indirect prompt injection. - Ingestion points: Reads project-specific entities from
products/,features/,propositions/,solutions/,packages/,competitors/, andcustomers/directories. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the logic for handling these data inputs.
- Capability inventory: The skill and its sub-agents have access to
Bashfor shell execution andWritefor file system modifications. - Sanitization: Employs the
communicate-review-assessoragent to perform multi-perspective quality evaluations and implements a closed-loop revision workflow to correct issues before finalization.
Audit Metadata