sift-init
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses common system utilities to manage ticket data and repository structure.
- Evidence:
scripts/sift-gate.shandassets/scripts/sift.shutilizegit,find,sed,awk, andmkdirto interact with the file system. These operations are scoped to the project root resolved bysift-gate.sh. - [DYNAMIC_EXECUTION]: The initialization process generates a shell script hook for project environment setup.
- Evidence:
scripts/sift-init.shcreates theconfig/worktree-setupscript using inputs provided through--worktree-linkand--worktree-command. The skill implements security controls by validating commands withbash -nand restricting symlink paths to relative locations within the project. - [INDIRECT_PROMPT_INJECTION]: The skill processes ticket data from files, creating an attack surface for untrusted repository content.
- Ingestion points: Ticket files (
.mdfiles with YAML front-matter) located in.ai/sift/open/and.ai/sift/archive/. - Boundary markers: The skill relies on standard YAML delimiters (
---) and Markdown headers. - Capability inventory: The
sift.shscript performs file reading, search, moving, and archiving (mv,find,grep). - Sanitization: Input validation is performed on prefixes and milestones. Data extraction uses
awkandsedpatterns rather than dynamic execution of content.
Audit Metadata