octopus-quick
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the bash tool to perform git operations and execute a local state management script located at
~/.claude-octopus/plugin/scripts/state-manager.sh.- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied task descriptions and embeds them into system outputs, creating a vulnerability surface. - Ingestion points: User-provided task descriptions from the
/octo:quickcommand or skill invocation as seen in the usage examples. - Boundary markers: There are no explicit instructions for the agent to use boundary markers or delimiters when handling the user's task input.
- Capability inventory: The skill utilizes
bash,Edit, andWritetools, which grant the agent significant control over the local environment and file system. - Sanitization: The implementation steps do not specify sanitization or escaping of the
$TASK_DESCRIPTIONvariable, which is interpolated directly into a shell heredoc during summary generation (cat > summary.md <<EOF ... $TASK_DESCRIPTION ... EOF).
Audit Metadata