IterativeDepth
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a
bashcommand to log metadata after completing a workflow. This command uses theechoutility to append a JSON string to~/.claude/LIFEOS/MEMORY/SKILLS/execution.jsonland executes a subshell for thedateutility. If placeholders like8_WORD_SUMMARYare replaced with unsanitized user input, it could lead to command injection. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest untrusted user requests and context, processing them through multiple "lenses" to generate binary-testable criteria.
- Ingestion points:
Problem/RequestandContextinputs defined inWorkflows/Explore.md, and customization files from~/.claude/LIFEOS/USER/CUSTOMIZATIONS/SKILLS/IterativeDepth/. - Boundary markers: None specified in the instructions to separate user data from agent logic.
- Capability inventory: The skill uses
TaskCreateandTaskUpdateplatform tools, and performs file-write operations via thebashlogging command. - Sanitization: No explicit sanitization or validation of external content is mentioned before interpolation into prompts or shell commands.
- [PERSISTENCE]: The skill implements a persistence mechanism by maintaining a local execution log in the user's home directory, allowing it to track history across different sessions.
Audit Metadata