skill-optimizer

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes 'git diff' or 'git diff --cached' to compare file changes made during a skill's execution against expected outcomes defined in the SKILL.md. This is a local operation used for diagnostic purposes.
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes conversation history and user feedback to identify failures or ambiguities. This creates a surface where malicious instructions embedded in the processed data could potentially influence the optimization proposals. Ingestion points: Conversation history, file diffs, and manual user feedback. Boundary markers: The skill uses a structured diagnostic framework (e.g., 'Specificity gap', 'Ambiguity') to categorize findings and separate them from general conversation. Capability inventory: The skill has the ability to read and write to local markdown files (SKILL.md, LESSONS.md) and execute git commands. Sanitization: The skill implements a redaction mechanism that automatically masks patterns matching API keys and tokens in its output and the persistent LESSONS.md file.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 02:27 PM
Security Audit — agent-trust-hub — skill-optimizer