dashboard
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from an external source that could contain malicious instructions.
- Ingestion points: Task titles and priority values are retrieved via the
agkantool inSKILL.md. - Boundary markers: No delimiters or "ignore embedded instructions" warnings are used when displaying task information.
- Capability inventory: The skill uses
bashto executeagkanandjqfor data processing. - Sanitization: Task content is displayed without sanitization or escaping of potentially harmful prompt-altering text.
- [COMMAND_EXECUTION]: The skill executes local shell commands to perform its primary function.
- Evidence: Invokes
agkan task count,agkan task list, andjqwithin the workflow steps defined inSKILL.md.
Audit Metadata