office-hours
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands like
git log,git diff, andgrepto understand the project context. These operations are limited to reading repository metadata and managing a documentation directory.\n- [EXTERNAL_DOWNLOADS]: The skill utilizesWebSearchto provide industry awareness. It follows best practices by implementing a privacy gate that requires user approval before sending any data to a search provider.\n- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it processes untrusted data from the web and project files.\n - Ingestion points: External search results,
CLAUDE.md,TODOS.md, and local design documents.\n - Boundary markers: None explicitly defined in the instructions.\n
- Capability inventory: The skill has access to
BashandWritetools but is strictly limited by instructions to only produce design documentation and forbidden from writing code.\n - Sanitization: No explicit sanitization of external data is performed before processing.
Audit Metadata