aw-create-walkthrough
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands to gather metadata for the walkthrough. It uses
git branch --show-currentto identify the active branch,git diff --statto list file changes, andgit logto summarize recent commits. Additionally, it usesmkdirandcatfor directory management and reading the localplan.mdfile. These commands are typical for development tools and are confined to the project's worktree.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection by ingesting data from a file that could theoretically contain malicious instructions.\n - Ingestion points: The skill reads the contents of
.agent/${BRANCH}/plan.mdto extract implementation details for the summary.\n - Boundary markers: There are no explicit delimiters or 'ignore' instructions used when reading from
plan.mdor when interpolating that data into thewalkthrough.mdtemplate.\n - Capability inventory: The skill has the ability to execute shell commands (
bash) and perform file system read/write operations.\n - Sanitization: The skill does not perform sanitization or structural validation on the content extracted from
plan.mdbefore processing it.
Audit Metadata