bento-checkpoint
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to read and follow behavioral instructions from documentation files located at the root of the user's repository.
- Ingestion points: Reads instructions from AGENTS.md, CLAUDE.md, and .agents/bento/bento-checkpoint.md in the repository root.
- Boundary markers: The skill lacks explicit delimiters or instructions to treat the contents of these files as data only rather than instructions.
- Capability inventory: The skill allows the agent to inspect file diffs, view running processes, and write handoff documentation to files.
- Sanitization: No sanitization or escaping mechanisms are specified for the content read from the repository documentation files.
Audit Metadata