project-genome
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/update_genome.pyutilizessubprocess.runto executegit logcommands. This is used to synthesize a summary of recent repository changes for therecent_changessection of the genome. The implementation uses a structured list of arguments rather than a raw shell string, which is a safe practice. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates an attack surface where instructions embedded in project documentation could influence the agent during the analysis phase.
- Ingestion points: The agent is instructed to read the first 3000 characters of all discovered
.mdfiles in the repository to evaluate their importance and purpose. - Boundary markers: There are no explicit delimiters or system instructions provided to the agent to disregard instructions found within the documentation files during analysis.
- Capability inventory: The skill allows the agent to execute Python scripts (which in turn run git commands) and write to critical project files like
PROJECT-GENOME.yamlandCLAUDE.md. - Sanitization: The skill does not implement content sanitization or instruction-filtering for the markdown data it ingests before presenting it to the agent for analysis.
Audit Metadata