dossier
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves gathering and synthesizing information from untrusted external sources.
- Ingestion points: The
GATHERstage inSKILL.mdutilizes theWebSearchandWebFetchtools to ingest content from arbitrary URLs based on the user's research request. - Boundary markers: The workflow includes a
REVIEWstage (prompts defined inreferences/review-lenses.md) where subagents with restricted context audit the generated dossier, specifically checking if claims are supported by the archived sources. - Capability inventory: The skill can execute local scripts (
archive-source.sh), write to the file system to store dossiers and source archives, and perform Git operations through automated hooks. - Sanitization: The archival script
archive-source.shattempts to mitigate risks from malicious web content by stripping script and style tags during text extraction viaawkorpandoc. - [COMMAND_EXECUTION]: The skill automates workflow steps using shell scripts and Git hooks.
- Evidence: The skill executes
scripts/archive-source.shto capture web content and employs several Git hooks (referenced inSKILL.mdandREADME.md) such assources-index-consistency.shanddossier-commit-gate.sh. These scripts are used for repository maintenance, archival integrity checks, and ensuring that a review artifact exists before a dossier is committed.
Audit Metadata