implement
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple local shell and Python scripts for project management, including task refreshing (
plan-refresh.sh), project health checks (upgrade-check.py), and build orchestration (merge.py). - [INDIRECT_PROMPT_INJECTION]: The skill reads project-local records and documentation to determine piece status and operational modes, which represents a surface for indirect instruction injection.
- Ingestion points: Operational parameters and task definitions are read from
masterplan.mdandrecords/references/pieces.md(accessed viaSKILL.mdandscripts/attempt.sh). - Boundary markers: The instructions do not define specific delimiters or warnings for the content read from these markdown records.
- Capability inventory: The skill is capable of executing internal scripts, writing build state to the Git directory, and managing GitHub issues through the
ghCLI. - Sanitization: The
scripts/attempt.shutility performs numeric validation on task identifiers and utilizes regular expression matching to verify configuration settings in the project plan.
Audit Metadata