skills/mpurbo/hsdd/hsdd-checkpoint/Gen Agent Trust Hub

hsdd-checkpoint

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes contents from implementation repositories and governance artifacts (specs, contracts, ADRs) to generate progress reports and revised plans.
  • Ingestion points: The evidence pass reads data from sibling implementation repositories (provided by the user) and the project's internal hsdd/ directory containing specifications and decision records.
  • Boundary markers: The instructions do not define delimiters or warnings to ignore embedded instructions within the audited files.
  • Capability inventory: The agent has permissions to write management documents to the filesystem, perform Git operations (commit, push), and generate prompts for other skills.
  • Sanitization: No sanitization or validation of the ingested content is specified before it is used to calibrate project velocity or determine the next steps in the execution plan.
  • [COMMAND_EXECUTION]: The skill requires active modification of the repository state through Git commands.
  • Evidence: The skill is instructed to commit management documents and push them to the spec-repo main branch within a submodule.
  • Context: These operations are fundamental to the skill's purpose of maintaining project synchronization and are gated by instructions to review the state first.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 05:24 AM