run-cherries-experiments
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and carry forward information from external files such as
RUN.mdand historical run memories (docs/runs/<RUN-ID>.md) when proposing new work or updating documentation. - Ingestion points: The agent is directed to read
RUN.mdand relevant run memories at the start of a session. - Boundary markers: There are no instructions provided to treat these files as untrusted or to ignore any embedded commands or instructions they might contain.
- Capability inventory: The skill has the ability to execute shell commands via the
cherriesCLI, run Python scripts usinguv, write to the local filesystem, and archive data to remote locations. - Sanitization: The skill does not define any sanitization or validation steps for the content of the documentation files before they are processed by the agent.
- [COMMAND_EXECUTION]: The skill relies on the execution of various
cherriesCLI commands for project initialization, running experiments, archiving records, and managing maintenance tasks. These commands are integral to the stated purpose of managing a Cherries experiment repository.
Audit Metadata