coach
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
coach.tsutility script executesgit logandgit diffcommands to gather metadata for developer standups and client progress digests. These operations are read-only and restricted to the local repository's forensic history. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted client communication (e.g., Slack messages, emails) via the
--scope-checkcommand and procedures defined inreferences/client.md, creating a potential attack surface. - Ingestion points: External client requests are ingested through the
--scope-checkargument for evaluation against the Scope of Work (SOW). - Boundary markers: No explicit delimiter-based boundary markers are implemented when interpolating these external inputs into the agent context.
- Capability inventory: The skill has access to file modification tools (
write_to_file,replace_file_content) and shell command execution via thebashtool and internal scripts. - Sanitization: The
coach.tsscript provides a layer of logic by using keyword-based classification (e.g., "redesign", "new feature") to evaluate requests objectively before the agent processes them.
Audit Metadata