aif-explore
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and prioritize project-specific rules from files like
.ai-factory/skill-context/aif-explore/SKILL.md. This creates a surface where instructions embedded in the project repository can override the skill's own safety constraints.\n - Ingestion points: Processes project files including
.ai-factory/skill-context/aif-explore/SKILL.md,.ai-factory/DESCRIPTION.md,.ai-factory/ARCHITECTURE.md,RULES.md, and plan files.\n - Boundary markers: The skill uses specific marker tags like
<!-- aif:active-summary:start -->for its own research data but lacks clear delimiters to prevent the agent from following instructions found in general project context files.\n - Capability inventory: The agent has access to
Read,Glob,Grep,Write,Edit,Bash, andTasktools.\n - Sanitization: No sanitization or validation is performed on the content of the project context files before they are processed.\n- [COMMAND_EXECUTION]: The skill instructs the agent to use the
Bashtool for local environment tasks, such as creating directories withmkdir -pand retrieving the current git branch usinggit branch --show-currentto resolve plan paths.
Audit Metadata