hillclimb

Pass

Audited by Gen Agent Trust Hub on Nov 6, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the user's repository to inform its implementation and review cycles, creating a potential surface for instructions embedded in source code to influence agent behavior.
  • Ingestion points: Source code files and evaluation cases referenced in SKILL.md and variants/evaluation.md, as well as logs and measurement data ingested in variants/performance.md.
  • Boundary markers: The provided instructions do not specify the use of delimiters or 'ignore' instructions for the ingested code content.
  • Capability inventory: The skill possesses authority to perform scoped code edits, execute local repository scripts, and invoke external review skills (/council and /review-loop).
  • Sanitization: No specific sanitization or filtering of external content is described before interpolation into the agent's context.
  • [COMMAND_EXECUTION]: The skill logic involves executing existing scripts located within the user's repository to establish performance or behavior baselines.
  • Evidence: SKILL.md states that the process 'settles one capture command, preferring a capture script the repository already has'.
  • [EXTERNAL_DOWNLOADS]: The skill references an external documentation source for manual evaluation procedures.
  • Evidence: variants/evaluation.md contains a link to 'https://github.com/Gabriel-Lafrance/Skills/blob/6c2735ff407385ed805e6d5c698eecc204552b0a/evals/tasks.md#how-to-run'. This resource belongs to the skill's author.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 6, 2026, 07:03 PM