autoresearch-finalize

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes several git commands including git rev-parse, git merge-base, git checkout, and git commit to manage repository state and branch creation.
  • [DYNAMIC_EXECUTION]: The finalize.sh script utilizes the node -e command to execute an inline JavaScript snippet that parses the groups.json file and extracts configuration parameters.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from files such as .auto/log.jsonl and .auto/prompt.md to identify which experiments to finalize. * Ingestion points: Instructions in SKILL.md for reading experimental logs and research context files from the .auto directory. * Boundary markers: Not present. * Capability inventory: Repository modification via git, bash script execution, and file system access. * Sanitization: Not present.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 05:07 PM
Security Audit — agent-trust-hub — autoresearch-finalize