housekeeper
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run project-defined verification scripts, including build systems, test suites, and linting tools. This execution of local code is an inherent risk if the repository contains malicious scripts designed to exploit the agent's environment.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection from the codebase it analyzes.
- Ingestion points: Untrusted data enters the agent context through the inspection of the project repository (SKILL.md).
- Boundary markers: The instructions lack explicit delimiters or warnings to ignore natural language instructions found within the code or comments.
- Capability inventory: The skill performs file system writes and executes shell commands for project verification (SKILL.md).
- Sanitization: There is no evidence of sanitization or filtering of the repository content before it is processed by the agent.
Audit Metadata