tech-debt
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the
!bashsyntax to execute a local shell script (yaml-helper.sh) at load time for configuration resolution. While this is used for project-specific settings, it executes automatically upon skill initialization.\n- [INDIRECT_PROMPT_INJECTION]: The skill scans codebase comments (TODO, FIXME, HACK) and interpolates them into a technical debt register, creating a surface for indirect instructions to be processed by the agent.\n - Ingestion points: Files in the codebase root accessed via
Glob,Grep, andReadtools.\n - Boundary markers: Includes human-in-the-loop checks requiring user confirmation via
AskUserQuestionbefore writing findings todocs/tech-debt-register.md.\n - Capability inventory: The skill possesses
WriteandEditcapabilities to modify documentation files.\n - Sanitization: No explicit sanitization of scanned comment content is performed before it is interpolated into the register.\n- [COMMAND_EXECUTION]: The skill utilizes a scoped
Bashtool to run a local helper script. The tool configuration is restricted to a specific path but allows for arbitrary arguments to be passed to the configuration resolver function.
Audit Metadata