skills/mpurbo/hsdd/hsdd-checkpoint/Gen Agent Trust Hub

hsdd-checkpoint

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses git commands to audit repository history, retrieve commit SHAs, and manage submodule pointers as part of its evidence pass.
  • [DATA_EXFILTRATION]: The skill includes instructions to perform git push operations to synchronize management documents with the project's specification repository remote.
  • [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by processing untrusted data from multiple external repositories. * Ingestion points: The skill reads artifact files and repository state from sibling implementation repositories and the spec repository. * Boundary markers: There are no explicit markers or instructions to ignore embedded commands within the audited project files. * Capability inventory: The skill has the ability to write management files to the local file system and execute network-enabled git commands. * Sanitization: The skill does not describe specific filtering or escaping mechanisms for content extracted from project artifacts before interpolating them into generated documents.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 04:41 PM
Security Audit — agent-trust-hub — hsdd-checkpoint