using-entire
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local CLI commands including
entire statusandentire checkpoint explainto retrieve repository metadata and historical intent transcripts. It also usesgit logto identify relevant checkpoints within commit trailers. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data originating from Entire checkpoints and git commit messages. This creates a surface for indirect prompt injection where maliciously crafted transcripts could attempt to influence the agent's behavior.
- Ingestion points: Output from
entire checkpoint explainandgit logis read into the agent's context (SKILL.md). - Boundary markers: The instructions mandate a 'Transparency Principle', requiring the agent to explicitly label findings as 'recorded intent' (from checkpoints) or 'inferred from code' to separate data from reasoning.
- Capability inventory: The skill utilizes
entireCLI commands andgitfor data retrieval; it does not perform arbitrary file writes or unsafe code execution based on the ingested data. - Sanitization: The skill requests structured JSON output (
--json) from the CLI tool to ensure consistent parsing and reduce the risk of interpretation errors.
Audit Metadata