archive-spec
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell utilities including
grep,awk, andgitto perform validation of document states and manage file movements within the project structure. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from local markdown files (
_index.md,task_NN.md) to verify project status before execution. - Ingestion points: Reads status fields from task files and metadata rows from the reference index file.
- Boundary markers: No explicit delimiters are used for the ingested file content.
- Capability inventory: Includes directory creation (
mkdir) and file movement (git mv) based on successful validation. - Sanitization: Employs an
awkscript that validates table headers, row formatting, and restricts paths to safe basenames to prevent directory traversal.
Audit Metadata