camp-workitems
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
campcommand-line tool (specificallycamp workitemand its aliases) to perform data discovery, create directories, and manage metadata. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from workflow directories and design documents, which represents a surface for indirect prompt injection.
- Ingestion points: Data is ingested via
camp workitem --jsonwhich reads from directories likeworkflow/<type>/<slug>and metadata files. - Boundary markers: The instructions do not define specific boundary markers for the AI when processing the JSON output of the tool.
- Capability inventory: The skill has the capability to write to the file system through the
createandadoptsubcommands. - Sanitization: The skill includes explicit validation rules for slugs and types, requiring them to be path-safe (no control characters, specific length limits, and character restrictions).
- [SAFE]: No obfuscation, malicious exfiltration patterns, or unauthorized persistence mechanisms were identified. The tool operates within defined project paths (
workflow/,.campaign/).
Audit Metadata