work
Warn
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill utilizes the
evalcommand to execute shell output from thewt session setutility. This is used to dynamically configure the environment for coordinator sessions.\n - Evidence: The instruction
eval "$(wt session set coord-<work-slug>)"inSKILL.mdcaptures and executes shell exports.\n- [INDIRECT_PROMPT_INJECTION]: The workflow relies on processing external inputs such asTaskDocumentfiles andAgent Completion Reports. These documents could potentially contain instructions that influence agent behavior.\n - Ingestion points: The skill reads task definitions from
.wt/execution/tasksand monitors worker reports viawt task reportandwt msg watch.\n - Capability inventory: The agent has the ability to execute shell commands (
wt,git,cargo,cmux), write to the filesystem, and manage worktrees.\n - Sanitization: The instructions mitigate this risk by requiring the agent to perform direct inspections of file contents, diffs, and build outputs rather than relying solely on the reports.\n
- Boundary markers: There are no explicit delimiters or safety instructions provided for the contents of the task files.\n- [COMMAND_EXECUTION]: The skill is designed around the execution of various CLI tools to manage the development lifecycle, including repository management, build tools, and custom task runners.\n
- Evidence: Extensive use of
wt,git,cargo, andcmuxcommands across all sections ofSKILL.md.
Audit Metadata