start-task
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill configures a
PostToolUsehook in its frontmatter that executes a local Python script (task_status_hook.py) wheneverWrite,Edit, orBashtools are used. This is used for maintaining task status. - [COMMAND_EXECUTION]: The instructions guide the agent to execute Python and shell commands to write JSON context files to a session-specific directory for state management.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources such as task files and artifact manifests via MCP tools (
sam_read,artifact_read). This data (requirements, constraints, acceptance criteria) influences the agent's subsequent actions during implementation. - Ingestion points: Data enters the context via
mcp__plugin_dh_sam__sam_readandmcp__plugin_dh_backlog__artifact_readcalls inSKILL.md. - Boundary markers: None explicitly defined in the instructions for the ingested content.
- Capability inventory: The skill uses
Write,Edit, andBashtools for implementation. - Sanitization: No specific sanitization or validation of the ingested task content is described.
Audit Metadata