context-loader
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands like
git ls-files,dirname,sort,xargs, andlsto explore the file system and project structure. These are standard tools used for their intended purpose within a development context.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and process numerous local project files (e.g.,package.json,spec.md,plan.md) to build context. These files constitute an external data source that could contain malicious instructions. The skill lacks explicit boundary markers or sanitization logic to mitigate the risk of the agent following instructions embedded within these files.\n - Ingestion points: Files like
CLAUDE.md,product.md,tech-stack.md,tracks.md, and individual track specifications/plans.\n - Boundary markers: None identified in the instructions.\n
- Capability inventory: Uses
run_shell_commandandread_fileto access and process project data.\n - Sanitization: No filtering or escaping of content from project files is specified.
Audit Metadata