project-session-management
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill facilitates project tracking through local markdown files and standard git operations. The provided script
scripts/resume.shperforms read-only operations usinggrepandgit logto summarize project status, presenting no risk of unauthorized execution or data exfiltration. All referenced templates and documentation focus solely on developer workflow management. - [INDIRECT_PROMPT_INJECTION]: The skill processes project-level planning documents (
SESSION.md,IMPLEMENTATION_PHASES.md) to maintain state. While this involves processing external data, the activity is the primary purpose of the skill and is managed within the user's local repository. - Ingestion points: The skill reads
SESSION.mdanddocs/IMPLEMENTATION_PHASES.mdfrom the project root directory. - Boundary markers: Content is organized using structured markdown headers, though no explicit adversarial instruction delimiters are employed.
- Capability inventory: The skill's operations are limited to standard git commits and file read/write actions within the project workspace.
- Sanitization: The skill relies on natural language parsing of the session files without explicit input sanitization filters.
Audit Metadata