draft-review-loop
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
draft-clicommands to manage the review lifecycle. - Commands like
draft status,draft open, anddraft comments listare utilized to interface with the Draft platform. - These operations are consistent with the skill's stated purpose of facilitating a local-to-remote review loop.
- [EXTERNAL_DOWNLOADS]: The skill documentation specifies a requirement for the
@innosage/draft-cliNode.js package. - This package is a vendor-owned resource associated with the author, innosage-llc.
- [DATA_EXFILTRATION]: Local workspace markdown content is transmitted to the Draft service when the
draft opencommand is executed. - This transmission is the primary intended function of the skill to enable external human review on the Draft GUI.
- [PROMPT_INJECTION]: The skill processes external data by reading comments from the Draft service.
- Ingestion points: Comments are retrieved via
draft comments list <path> --json(SKILL.md). - Boundary markers: The skill does not explicitly define delimiters or instructions for the agent to ignore potentially malicious instructions within comments.
- Capability inventory: The agent is instructed to use file-editing tools to apply feedback to local files.
- Sanitization: No specific sanitization or validation steps are defined for the ingested comment data.
Audit Metadata