pm-growth
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The preamble executes a shell script located at
../../check-update.sh. This execution occurs outside the skill's immediate directory, creating a dependency on the integrity of the external environment and any potentially unverified code within that script. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to the ingestion of untrusted data from local files.
- Ingestion points: The skill reads the contents of
docs/03-增长迭代/AARRR增长分析报告.mdduring the diagnostic step to extract growth bottlenecks. - Boundary markers: The instructions lack delimiters or explicit boundary markers to differentiate between the agent's logic and the content of the ingested file.
- Capability inventory: The agent has access to powerful tools including
Bash,Write, andAgent, which increases the potential impact of a successful injection attack. - Sanitization: No sanitization, validation, or filtering of the file content is performed before it is processed by the agent.
Audit Metadata