money-retro
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from various local files, including session snapshots and learnings logs, which serves as a potential vector for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: The tool reads from ~/.smtm/sessions/, ~/.smtm/projects/{slug}/learnings.jsonl, and ~/.smtm/analytics/skill-usage.jsonl.
- Boundary markers: The prompt does not define specific delimiters or instructions to ignore potential commands embedded within the loaded data.
- Capability inventory: The skill has read/write permissions for the ~/.smtm/ directory, allowing it to aggregate data and save new retrospective reports.
- Sanitization: There are no documented steps for sanitizing or validating the text content before it is incorporated into the final output summary.
Audit Metadata