night-shift
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
tmuxto manage persistent background sessions for AI agents using theclaude --remote-controlcommand. It also utilizespsfor process verification and theopencommand on macOS to display the generated report. - [EXTERNAL_DOWNLOADS]: The skill instructs agents to search for and retrieve research data and examples from external sources including GitHub and X/Twitter.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface (Category 8) due to its processing of repository files and external research content. 1. Ingestion points: Repository content and external research data. 2. Boundary markers: Absent. 3. Capability inventory: Background shell access and task dispatching. 4. Sanitization: None specified. This risk is managed by the skill's read-only analysis design and human-gated execution.
Audit Metadata