agent-context-loader
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill discovers and merges instructions from external files into the agent session.
- Ingestion points: Discovery of
AGENTS.mdfiles across the directory tree and ancestors (SKILL.md). - Boundary markers: No explicit delimiters or boundary instructions are mentioned for the merged content.
- Capability inventory: The skill utilizes
Bash,Grep,Read,Write, andEdittools (SKILL.md). - Sanitization: The instructions do not define sanitization logic for the ingested instruction blocks.
- [COMMAND_EXECUTION]: The skill uses
Bashfor filesystem discovery and includes a directory-change hook scriptscripts/check-agents-md.shthat checks for file existence and outputs text to the terminal. - [EXTERNAL_DOWNLOADS]: The skill links to official documentation (docs.anthropic.com) and the author's personal and business domains (jeremylongshore.com, intentsolutions.io, tonsofskills.com). These resources are recognized as legitimate and trace back to the author's infrastructure.
Audit Metadata