retro
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses dynamic context injection (
!commandsyntax) to execute shell commands likecatandgitupon loading. These are used to populate the agent's context with sprint logs and reviews from the local repository. Additionally, the skill provides a Bash script to automate git commits of the retrospective results. - [PROMPT_INJECTION]: An indirect prompt injection surface was identified where the skill processes data from external files.
- Ingestion points: Reads content from
docs/sprint-reviews/*.mdand.claude/sprint-log.mdinSKILL.md. - Boundary markers: None used; content from these files is injected directly into the agent's context without delimiters or warnings to ignore embedded instructions.
- Capability inventory: The skill has access to
Write,Edit, andBashtools (specifically forcat,git,date, andgrep) as defined inSKILL.md. - Sanitization: No validation or filtering is performed on the ingested file content before it is processed by the agent.
Audit Metadata