instruction-style
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto download and run the@lousy-agents/clitool from the npm registry for file discovery. This tool is a resource provided by the skill's author and is central to the skill's functionality. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes and modifies agent instruction files, which serves as a potential vector for indirect prompt injection if the files being processed contain malicious instructions targeted at the revising agent.
- Ingestion points: Repository instruction files such as
AGENTS.md,CLAUDE.md, and harness-specific rule files found in.claude/rules/or.github/instructions/. - Boundary markers: No explicit delimiters are specified to separate the instructions being revised from the agent's own processing environment.
- Capability inventory: The skill uses
Bash(forgitand vendor tooling),Read,Glob, andGrepto manage and modify files. - Sanitization: Input prose from instruction files is processed without specific sanitization or filtering logic.
- [COMMAND_EXECUTION]: The skill executes
gitcommands (git diff,git log,git show) to evaluate changes in instruction prose and history. It also usesrmto clean up temporary metadata files generated during discovery.
Audit Metadata