instruction-cleanup
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides shell snippets for the agent to execute during the implementation phase. These commands generate a project-specific identifier using
cksumandawkto create or remove a temporary flag file in the system's temporary directory (/tmpor$TMPDIR). This is used to coordinate behavior with other installed plugins. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process the content of project-specific instruction files (e.g.,
CLAUDE.md,AGENTS.md, andMEMORY.md) to perform cleanup and restructuring. - Ingestion points: The agent reads the contents of the directory tree, instruction files, and
@-importreferenced files as part of the Phase 1 Audit. - Boundary markers: The instructions do not implement explicit delimiters or boundary markers to isolate the content of analyzed files from the agent's core instructions.
- Capability inventory: The skill uses
grepfor verification and performs file system write operations to restructure instructions and manage the temporary coordination flag. - Sanitization: There is no explicit sanitization or filtering logic applied to the content moved between files, as the agent is expected to follow a user-approved restructuring plan.
Audit Metadata