standup
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
git log,git config, andgit branchto retrieve local development activity. These are read-only operations essential for the skill's primary function of generating a standup report and do not involve sensitive system modifications or network access. - [INDIRECT_PROMPT_INJECTION]: The skill ingests git commit messages, which are untrusted external data sources. 1. Ingestion points: Raw commit messages retrieved via the
git logcommand in Step 1. 2. Boundary markers: None present; the agent is instructed to transform the raw output directly. 3. Capability inventory: The skill contains no network capabilities, file-writing functions, or administrative command execution. 4. Sanitization: No sanitization is performed on the commit content. However, the lack of dangerous capabilities effectively prevents any embedded instructions from achieving a malicious outcome beyond text generation.
Audit Metadata