record-decision
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local shell script (
validate-records.sh) to perform record validation and security scanning. This script is distributed as part of the skill and relies on standard POSIX tools (git, grep, awk, sed) to ensure the integrity of the decision substrate. - [PROMPT_INJECTION]: The skill processes user-supplied judgment prose, which is an indirect prompt injection surface. The skill incorporates multiple safeguards to manage this surface.
- Ingestion points: 'Human-Judgment', 'Human-Accepted-Risk', and 'Human-Response-If-Wrong' fields collected from user input as described in
SKILL.md. - Boundary markers: The grammar defined in
RECORD.mdrequires multi-line human content to be prefixed with|delimiters, separating it from the record metadata. - Capability inventory: The skill is restricted to local file operations within
.skills/decisions/and the execution of the included validation script. - Sanitization: The
validate-records.shscript includes a mandatory secret scanning pass (--scan) that detects sensitive data including PEM private keys, AWS access keys, GitHub tokens, and Slack tokens using regular expressions.
Audit Metadata