source-command-ccguide-daily
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from documentation snapshots and GitHub release digests, creating an ingestion surface for untrusted content.
- Ingestion points: Data enters the context through tool outputs from
refresh_official_docs,diff_official_docs, andget_digestas specified in the command template in SKILL.md. - Boundary markers: The instructions lack explicit delimiters or "ignore instructions" directives to prevent the agent from being influenced by commands embedded in the external documentation or changelogs.
- Capability inventory: The skill facilitates data retrieval and summary generation; it does not directly invoke high-risk capabilities such as arbitrary shell execution or local file system writes.
- Sanitization: No validation or sanitization procedures are defined for the fetched external content before it is processed and presented to the user.
Audit Metadata