finish-work
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a sequence of shell commands to manage code changes, including Git operations such as
status,diff,log, andcommit, as well as project-specific validation usingbun run check.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the local repository environment to inform its actions and generate user-facing content, which presents a surface for potential instruction injection.\n - Ingestion points: Reads local configuration from
package.jsonand version control output fromgit diffandgit log.\n - Boundary markers: The instructions specify using HEREDOC syntax for the
git commitcommand to separate the generated message from the shell command structure.\n - Capability inventory: The agent can execute arbitrary local scripts defined in
package.jsonand perform file staging and commit operations.\n - Sanitization: No explicit sanitization or filtering of the ingested diff content is specified before it is processed by the model to generate outcomes.
Audit Metadata