maintain
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a wrapper script (
scripts/run.py) to execute the maintenance engine viauv. This script usessubprocess.runandos.execvpeto launch the engine as a separate process. - [EXTERNAL_DOWNLOADS]: The skill installs the
exmergo-dex-corepackage from PyPI. The version is strictly pinned to1.17.3in the wrapper script, ensuring consistent and predictable deployment. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data that could contain malicious instructions.
- Ingestion points: Data enters the context via database warehouse comments, SQL files, YAML configurations, and ticket/issue text.
- Boundary markers: The skill contains explicit instructions in
SKILL.md(Spending authority section) telling the agent to treat these sources strictly as data. - Capability inventory: The primary capability is the execution of the maintenance engine via
scripts/run.pywhich can read from and propose changes to the project. - Sanitization: The skill relies on the agent's adherence to the "Spending authority" rules, which forbid data from authorizing sensitive actions like bypassing budgets or confirming destructive operations.
Audit Metadata