ghm-status-sync
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to Indirect Prompt Injection because it ingests data from untrusted sources and uses it to modify the project's README.md.
- Ingestion points: The skill reads content from
README.md,PRD.md, EPIC session files in theepics/directory, and agent memory files in.claude/agents/*/MEMORY.md. - Boundary markers: There are no explicit instructions or delimiters used to ensure the agent ignores embedded instructions within the ingested data.
- Capability inventory: The skill utilizes
Read,Write,Edit,Glob, andGreptools to modify the project filesystem. - Sanitization: No sanitization or validation of the extracted strings is performed before they are interpolated into the README.md dashboard.
Audit Metadata