source-command-sync
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local verification script at
./scripts/check-landing-sync.shto determine synchronization status.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests script output to dynamically generate manual fix instructions and Git commands.\n - Ingestion points: Standard output from the synchronization check script (SKILL.md).\n
- Boundary markers: Absent; results are processed without explicit delimiters.\n
- Capability inventory: Subprocess execution for shell scripts and Git command operations (SKILL.md).\n
- Sanitization: The skill does not perform validation or sanitization on the script output before generating fix suggestions.
Audit Metadata