lov-distill-to-system
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to distill and persist reusable lessons into agent instruction files, which is a mechanism that could be targeted to influence future agent behavior.
- Ingestion points: Processes user requests and existing project documentation to extract and format new rules.
- Boundary markers: The execution boundary in
SKILL.mdexplicitly separates analysis and preview from modification, requiring user confirmation for persistence. - Capability inventory: Modifies instruction files and writes to a local profile JSON using
scripts/profile_store.py. - Sanitization:
scripts/profile_store.pyincludes a filter (SENSITIVE_PARTS) to prevent the persistence of secret-like fields (tokens, passwords, keys) into the long-term profile storage. - [COMMAND_EXECUTION]: The skill includes and utilizes local Python scripts for operational tasks.
- Evidence:
scripts/profile_store.pyis used to manage identity and brand configuration data in the local filesystem. - Evidence:
scripts/validate_skill.pyperforms structure and metadata linting of the skill source code usingPyYAML. - [SAFE]: The external references and dependencies are standard for this ecosystem and follow secure management practices.
- Evidence:
skill.yamldefines a clearuser-profile/v1schema for data persistence with a restricted namespace.
Audit Metadata