uw-grill
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell and Node.js scripts (such as
grill-brief.mjs,grill-answers.mjs, and_resolve-plugin-root.sh) to perform business logic extraction and verdict processing. - [DYNAMIC_EXECUTION]: Script paths are computed at runtime using environment variables (
CLAUDE_PLUGIN_ROOT) or by searching the local plugin cache ($HOME/.claude/plugins/cache/*/unwind/*/). Sourcing shell scripts (source) and executing Node.js processes on these dynamically resolved paths constitutes dynamic execution of local code. - [INDIRECT_PROMPT_INJECTION]: The skill ingests content from external markdown files (
docs/unwind/questions/*.md) designed to be modified by users or domain experts. The answers are then propagated back into the system's primary documentation layers (docs/unwind/layers/**). - Ingestion points: Processes
docs/unwind/questions/*.md(expert answers) anddocs/unwind/layers/**(layer documentation). - Boundary markers: Employs specific HTML comment markers (
<!-- grill: ... -->) to delimit machine-readable metadata within natural language text. - Capability inventory: Utilizes
Bash(git, node, pnpm),Write,Edit, andTask(subagent invocation) tools. - Sanitization: Performs basic validation of verdict checkboxes but does not sanitize the natural language 'Notes' or 'corrected behavior' fields which are written back to the documentation, creating a potential vector for instructions to reach downstream code generation tools.
Audit Metadata