weekly
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using
git logto identify work coverage gaps. The repository paths and dates are resolved from local configuration files or user-provided input. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted data from git commit messages and external activity logs to generate a report that is subsequently written to the local filesystem.
- Ingestion points: Activity data from JSON files in the user's vault and commit messages from local git repositories.
- Boundary markers: The instructions provide structural guidance but lack explicit delimiters to isolate external data from the analysis logic.
- Capability inventory: The skill can read local files, execute
git logcommands, and write markdown files to the local filesystem. - Sanitization: No explicit sanitization or filtering is performed on the content retrieved from external logs before it is processed and written to disk.
Audit Metadata