skills/kirkchen/beat/archive/Gen Agent Trust Hub

archive

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-controlled feature files, proposals, and design documents which are then parsed and synced to long-term documentation.
  • Ingestion points: The skill reads feature files, proposals, and design documents from the change directory in SKILL.md.
  • Boundary markers: No explicit delimiters or instructions to ignore embedded prompts are present in the processing logic.
  • Capability inventory: The skill performs file system operations including mkdir and mv, and writes data to beat/CONTEXT.md and capability-specific README.md files.
  • Sanitization: There is no evidence of content sanitization or validation before the data is integrated into the living documentation.
  • [COMMAND_EXECUTION]: The skill executes shell commands for directory management and file organization during the archiving process.
  • Evidence: The skill uses mkdir -p beat/changes/archive and mv beat/changes/<name> beat/changes/archive/YYYY-MM-DD-<name> to handle directory movement as part of its terminal state logic in SKILL.md. These operations are consistent with the skill's primary purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 04:34 AM
Security Audit — agent-trust-hub — archive