night-shift

Pass

Audited by Gen Agent Trust Hub on Jul 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses tmux to manage persistent background sessions for AI agents using the claude --remote-control command. It also utilizes ps for process verification and the open command on macOS to display the generated report.
  • [EXTERNAL_DOWNLOADS]: The skill instructs agents to search for and retrieve research data and examples from external sources including GitHub and X/Twitter.
  • [PROMPT_INJECTION]: The skill has an indirect prompt injection surface (Category 8) due to its processing of repository files and external research content. 1. Ingestion points: Repository content and external research data. 2. Boundary markers: Absent. 3. Capability inventory: Background shell access and task dispatching. 4. Sanitization: None specified. This risk is managed by the skill's read-only analysis design and human-gated execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 3, 2026, 05:44 AM
Security Audit — agent-trust-hub — night-shift