context-health
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to perform metadata analysis and content inspection of local files.
- Evidence: Uses
wc -lto count lines in context files at~/.claude/.context/core/*.md. - Evidence: Uses
headandgrepto verify synchronization status in~/.claude/rules/elle-core.md. - Evidence: Uses
findto locate platform capability reference files within the plugin cache. - [INDIRECT_PROMPT_INJECTION]: The skill reads and summarizes content from multiple context files that could contain instructions embedded in data, which the agent might inadvertently follow.
- Ingestion points: Reads multiple markdown files from
~/.claude/.context/core/(e.g.,identity.md,preferences.md,rules.md,relationships.md,triggers.md,workflows.md,session.md,projects.md,improvements.md). - Boundary markers: None; the instructions do not specify delimiters or provide warnings to the agent to ignore instructions embedded within the audit targets.
- Capability inventory: The skill utilizes read-only shell tools (
wc,head,grep,find) and file-reading capabilities. No network exfiltration or file-writing tools are invoked. - Sanitization: No evidence of sanitization or content filtering was found for the data ingested from the context files.
Audit Metadata