sprint
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local script,
scripts/graph-audit, to perform integrity checks on durable files after completing a roadmap step. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from multiple user-managed files, creating a potential surface for indirect prompt injection.
- Ingestion points: The skill reads from
baton.md,wiki/business/vision.md, initiative files withinwiki/initiatives/, and user-provided inputs inraw/inbox/. - Boundary markers: The skill relies on citing sources and factual reporting but does not implement explicit structural boundaries or delimiters for all data ingested from the vault files.
- Capability inventory: The skill possesses capabilities for local file system read/write operations and the execution of the
scripts/graph-auditcommand. - Sanitization: The workflow incorporates a 'shared durable claim admission gate' at write time and utilizes the
graph-auditscript to enforce data relationships and verify integrity.
Audit Metadata