plan-hamster
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell scripts (
ensure-ready.sh) and PowerShell scripts (ensure-ready.ps1) to verify the execution environment and project readiness. - [COMMAND_EXECUTION]: Frequently invokes the
hamsterCLI tool with subcommands such asstatus,sync, andshipto interact with the project's state and data. - [INDIRECT_PROMPT_INJECTION]: The skill reads and analyzes
brief.mdand task files in the.hamster/directory, which could contain instructions intended to influence the agent's behavior during analysis modes. \n - Ingestion points: Reads content from
.hamster/${account}/briefs/${slug}/brief.mdand multiple associated task markdown files. \n - Capability inventory: The skill can execute
hamsterCLI commands that sync data or transition project status based on analysis. \n - Boundary markers: No specific delimiters or safety instructions are used to separate user-controlled task content from the agent's core instructions. \n
- Sanitization: Content from task bodies is extracted and processed without specific sanitization or filtering.
- [DYNAMIC_EXECUTION]: Employs Python heredocs within shell blocks to dynamically execute logic for parsing and validating the
.hamster/.state.jsonfile during account resolution. - [PRIVILEGE_ESCALATION]: The skill's documentation instructs the agent or user to re-run readiness checks with elevated permissions (e.g., sudo) if environment restrictions prevent access to necessary system credentials.
Audit Metadata