statuskit
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from GitHub issues, pull requests, and local documentation to generate its recommendations.\n
- Ingestion points: Reads issue and PR metadata (titles, labels) via the
ghCLI and parses local documentation indocs/plans/anddocs/adr/.\n - Boundary markers: No explicit delimiters or instruction-bypass warnings are used when processing these external strings for the dashboard output.\n
- Capability inventory: The skill uses
Bashto execute git/gh commands andWrite/Editto manage local snapshot files and update configuration files like.gitignoreandCLAUDE.md.\n - Sanitization: The skill uses
gh --jqto extract specific metadata fields, which minimizes the ingestion of arbitrary text from issue and PR bodies.\n- [COMMAND_EXECUTION]: Performs extensive read-only shell operations usinggitandghto collect project telemetry, such as branch state, commit history, and stash lists.\n- [SAFE]: File modifications are limited to a specific scratch directory (docs/status/) and appending non-executable policy declarations to existing configuration files with user approval.
Audit Metadata