mission
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to manage project tasks across multiple AI sessions using a deterministic event-sourcing model. No malicious patterns or security vulnerabilities were detected.
- [COMMAND_EXECUTION]: The skill executes local bash scripts for mission management. All user-provided inputs, such as mission slugs, session IDs, and task IDs, are validated against strict regular expressions (e.g.,
^[a-z0-9]([a-z0-9-]*[a-z0-9])?$) to prevent path traversal or shell injection. - [COMMAND_EXECUTION]: The scripts utilize
jqfor JSON processing, specifically using the--argand--argjsonflags to safely interpolate user data (such as task titles and descriptions) into JSON structures, effectively preventing injection attacks. - [DATA_EXFILTRATION]: No network operations or external data transmissions were found in any of the scripts. All data operations are localized to the
docs/andscripts/directories.
Audit Metadata