skill-resume
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local script
./scripts/octo-state.shto retrieve project state variables and determine the appropriate context tier. This is a standard integration for managing persistent workflow state within a project environment. - [PROMPT_INJECTION]: The skill ingests data from multiple project files which creates a surface for indirect prompt injection if these files contain instructions designed to override agent behavior.
- Ingestion points: Processes contents from
.octo-continue.md,.octo/STATE.md, and.octo/PROJECT.mdusingcat,grep, andsed. - Boundary markers: Absent; the content from these files is displayed directly into the agent's context without delimiters or warnings to ignore embedded instructions.
- Capability inventory: Includes shell command execution, local script invocation, and file system access.
- Sanitization: Absent; the skill assumes the integrity of the state files generated by its own ecosystem.
Audit Metadata