curate
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands to resolve paths and determine repository state.
- Executes
bash ~/.claude/coordination/resolve-coord-dir.shto locate the coordination journal. - Executes
git rev-parse --show-toplevelto identify the repository root. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from multiple sources to perform its verification task.
- Ingestion points: Processes user-pasted claims, repository summary files (
docs/summaries/pause-*.md), and a shared coordination journal (journal.md). - Boundary markers: Absent; the instructions do not specify delimiters or warnings to ignore instructions embedded within the claims being verified.
- Capability inventory: The agent can execute shell commands (
bash,git), dispatch sub-agents (Agenttool), and append to files. - Sanitization: Absent; the skill passes extracted claims verbatim to the
curatorsub-agent. - [FILE_SYSTEM_MODIFICATION]: The skill prompts the user to append observational data to a log file located at
~/.claude/skill-observations/log.md.
Audit Metadata