reflect-on-vibe-code-growth
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted external data, such as chat history (Chat) and project files (Codex), to compute capability scores and generate growth reports. This creates a surface for indirect prompt injection if the ingested data contains malicious instructions meant to manipulate the agent's evaluation output.\n
- Ingestion points: Ingests project state, Git history, and conversational records from the agent's workspace and chat history.\n
- Boundary markers: The instructions mandate the use of explicit evidence categories (
exact,user-reported,phase-estimate,behavioral-evidence-score,unverifiable) to distinguish between different data sources and their reliability.\n - Capability inventory: The skill uses bundled Node.js scripts to perform file system operations (read/write) and generate Markdown/HTML reports. It does not possess native network capabilities.\n
- Sanitization: The
validate-mirror-record.mjsscript performs rigorous checks, including JSON schema enforcement and a dedicated scanner (SENSITIVE_KEYandSECRET_LITERAL) that identifies and blocks the inclusion of API keys, private keys, or other credentials in the generated records.\n\n- [COMMAND_EXECUTION]: The skill directs the agent to execute local Node.js scripts (save-mirror-record.mjs,validate-mirror-record.mjs) to manage the user's history records. These scripts are responsible for creating an immutable, append-only database of assessments. The execution logic is contained within the skill's own distribution and follows secure implementation patterns, such as using atomic file writes to prevent data corruption and ensuring path resolution remains within the designated history root.
Audit Metadata