acpx-patterns
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides structured command-line examples for the
acpxutility, enabling capabilities like background monitoring, parallel task execution, and automated retries.\n- [PROMPT_INJECTION]: The 'Crash-Resilient Overnight' and 'Parallel Development' patterns instruct the agent to read and follow instructions from external files (e.g.,tasks/plan-*.mdandtasks/spec-*.md). This establishes an indirect prompt injection vulnerability surface where untrusted data could influence agent behavior.\n - Ingestion points: Local project files in the
tasks/directory are read using theReadandGlobtools as specified in the command examples inSKILL.md.\n - Boundary markers: Absent; the provided prompt templates do not use delimiters or instructions to prevent the agent from obeying commands embedded within the input files.\n
- Capability inventory: The commands grant the agent access to powerful tools including
Bash,Write, andEdit, which could be abused if the agent is compromised by malicious file content.\n - Sanitization: Absent; no validation or sanitization of the content from the implementation plans is performed.
Audit Metadata