compound
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple local shell scripts located in
~/.claude/skills/nanostack/bin/to manage workflow phases, find existing solutions, and handle telemetry data. These tools are internal to the author's nanostack ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sprint artifacts to generate solution documentation, creating an attack surface for indirect prompt injection.
- Ingestion points: Reads JSON artifact files (review, security, qa, and ship phases) resolved via the
resolve.shscript (SKILL.md). - Boundary markers: No explicit delimiters or instructions to ignore embedded prompts are defined for the artifact reading process.
- Capability inventory: The skill has the capability to write solution files via
save-solution.sh, save artifacts, and modify skill files viagraduate.sh(SKILL.md). - Sanitization: No explicit sanitization, validation, or filtering of the artifact content is documented.
- [DYNAMIC_EXECUTION]: The graduation process within
graduate.shenables the promotion of validated solutions directly intoSKILL.mdfiles, which constitutes a form of automated instruction generation based on previously captured data.
Audit Metadata