variants
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from several local sources including
docs/consistency.md,AGENTS.md, and the output of thewt config showcommand. This content is used to shape TaskDocuments and matrix profiles. There are no explicit boundary markers or sanitization steps defined to prevent malicious instructions within these files from influencing the agent's logic or subsequent command generation. - Ingestion points:
docs/consistency.md,.wt/execution/tasks, andwt config showoutput. - Capability inventory: The agent has the ability to write files to
.wt/config/profiles/,.wt/execution/tasks/, and execute shell commands via thewtbinary. - Boundary markers: Absent.
- Sanitization: Not specified.
- [COMMAND_EXECUTION]: The skill relies on executing a local binary located at
./target/debug/wtas well as standard utilities likegit,find, andsed. While these are characteristic of a development environment skill, it assumes thewtbinary is trusted and requires the agent to have execution permissions in the repository's debug directory.
Audit Metadata