end-of-day-recap
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard
gitandglab(GitLab CLI) commands. These commands are used to fetch the user's commit history, current branch, and merge requests updated during the day. These are read-only, informational operations required for the skill's primary function. - [PROMPT_INJECTION]: The skill processes untrusted text from external sources such as Git commit messages and ClickUp task comments, which presents a surface for potential indirect prompt injection.
- Ingestion points: Data is pulled from Git log output, GitLab MR lists, and ClickUp API responses (time entries, tasks, comments, and chat messages).
- Boundary markers: The skill does not define specific delimiters to separate untrusted data from the agent's instructions.
- Capability inventory: The skill utilizes read-only access to Git and ClickUp data to synthesize a report.
- Sanitization: No explicit sanitization or safety filtering of the retrieved content is specified in the instructions.
Audit Metadata