rules-maintenance
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and process rule files from the
.agent-team/rules/directory. This creates a vulnerability surface where instructions embedded within those files could influence agent behavior. - Ingestion points: Reads
.agent-team/rules/index.mdand specific rule files implicated by sync requests as stated inSKILL.md. - Boundary markers: Absent; there are no instructions or delimiters defined to prevent the agent from following prompts found within the ingested files.
- Capability inventory: The skill is authorized to execute the
agent-team rules syncCLI command. - Sanitization: Absent; the skill does not perform validation or filtering of the content within the rule files before processing.
- [COMMAND_EXECUTION]: The skill is configured with a CLI binding to execute the
agent-team rules synccommand on the local system.
Audit Metadata