receipts
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the
!commandsyntax inSKILL.mdto execute shell commands at load time. This is used to run a local script (nerf-receipts.js) to generate performance data for the agent's context. - [COMMAND_EXECUTION]: The skill executes
nodevia the shell to run performance tracking scripts. The command paths are relative to the skill directory or plugin root (${CLAUDE_SKILL_DIR}and${CLAUDE_PLUGIN_ROOT}), which is a standard pattern for integrated tooling. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external script execution and provides instructions on how to interpret that data.
- Ingestion points: The output of the
nerf-receipts.jsscript is injected directly into the skill's context. - Boundary markers: None present; the agent is instructed to interpret the injected content directly.
- Capability inventory: The skill has shell execution capabilities via the dynamic context injection syntax.
- Sanitization: No explicit sanitization or validation of the script output is performed before presentation to the agent.
Audit Metadata