refresh-roadmap-status
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands such as
grep,sed, andtestto extract status data from local project files. It enforces security by strictly validating all identifiers (CODE, MILE-N, ROAD-N) against alphanumeric regex patterns and requiring all shell arguments to be passed as single non-option arguments to prevent command injection. - [EXTERNAL_DOWNLOADS]: Fetches roadmap sign-off comments and draft statuses from Notion via dedicated tools. This connection is used to provide context on why specific milestones are delayed. Notion is a well-known project management and collaboration service.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests untrusted data from repository files (roadmaps, vision docs, and specifications) and Notion comments. The risk is mitigated by explicit instructions to treat all ingested content as passive data, never to obey embedded instructions, and to validate all extracted identifiers before use.
Audit Metadata