zentao-task
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill operates by executing the
zentao-clibinary. It provides a structured set of commands for listing, creating, updating, and deleting tasks. These commands are executed locally in the agent's environment. - [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests untrusted user data into command arguments.
- Ingestion points: User-provided text for task names, comments, and work descriptions across all command reference files (e.g.,
zentao-task-create.md,zentao-task-update.md). - Boundary markers: Not explicitly defined in the skill instructions to separate user data from command parameters.
- Capability inventory: Includes the ability to create, modify, and delete data within the ZenTao system using the
zentao-clibinary. - Sanitization: The instructions do not specify any validation or escaping logic for user-provided strings before they are interpolated into shell commands.
Audit Metadata