project-review
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
git logto retrieve project history for the purpose of summarizing milestones. This is a functional requirement for the skill's stated purpose of reviewing project progress. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests untrusted data from external sources to generate summaries.
- Ingestion points: The skill reads content from
CHANGELOG.md, the output ofgit log, and local project notes. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore potentially malicious instructions embedded within the logs.
- Capability inventory: The agent has the capability to read local files, execute shell commands (git), and write to local documentation files.
- Sanitization: No sanitization or validation of the ingested log content is mentioned before it is processed by the agent for summarization.
Audit Metadata