feature
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a
PreToolUsehook to execute a local script,enforce-sprint.sh, which acts as a gatekeeper for git operations. This script ensures compliance with the sprint workflow by checking for the existence and recency of required artifacts before allowinggit addorgit commitcommands. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it reads project artifacts and source code to establish context for the feature request.
- Ingestion points: Artifacts are retrieved via
find-artifact.shand the codebase is read directly if artifacts are missing inSKILL.md(Step 1). - Boundary markers: No specific delimiters or warnings to ignore embedded instructions are provided when reading this content.
- Capability inventory: The agent can execute shell commands (subject to the hook) and invoke other specialized skills like
nano,review,security,qa, andshipusing the Skill tool. - Sanitization: No explicit sanitization or filtering of the ingested content is performed before passing context to subsequent skills.
Audit Metadata