shaping
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard developer CLI tools, including
git,gh(GitHub), andglab(GitLab), to inspect repository visibility and publish design specifications as issues. These operations are limited to project management tasks and incorporate user confirmation steps. - [SAFE]: The skill incorporates a robust privacy gate through a specialized Python script (
scripts/check-publish.py). This script automatically scans for leaked local file paths (e.g.,/Users/,/home/) and ensures that internal drafting notes are sanitized or rewritten before being shared externally. - [SAFE]: Indirect prompt injection risks from user-provided intents are managed through a structured shaping process that includes mandatory manual review, ingestion boundaries for untrusted data, and automated privacy checks before any high-capability operations are performed.
Audit Metadata