lodestar-docs
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill triages markdown files based on their content, headers, and status markers (e.g., "status:", "Superseded by") to determine whether to harvest knowledge, merge files, or delete them. This ingestion of untrusted data from the repository creates a surface for instructions embedded in documents to influence the agent's decision-making process.
- Ingestion points: Headers of markdown files and summary documents like
README.mdandINDEX.mdas described inreferences/workflow.md. - Boundary markers: None identified.
- Capability inventory: The skill has the capability to write to files, delete files, and execute
git commitoperations as detailed inreferences/operations.mdandreferences/workflow.md. - Sanitization: None identified for processing document content.
- [COMMAND_EXECUTION]: The
scripts/scope.mjsutility executes thegit logcommand vianode:child_processto retrieve the last commit date for files in the repository to identify orphaned documents. - [DYNAMIC_EXECUTION]: The
scripts/setup-modules.mjsfile utilizes dynamicimport()to load functionality from the siblinglodestar-setupskill. This mechanism is used to share runtime logic and configuration across the vendor's tool suite.
Audit Metadata