Gardening Skills Wiki
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on a suite of Bash scripts (
garden.sh,check-links.sh,check-naming.sh,check-index-coverage.sh, andanalyze-search-gaps.sh) to perform file system analysis and health checks. The master scriptgarden.shmanages these by ensuring internal scripts are executable usingchmod +xand executing them as subprocesses within the local environment.\n- [INDIRECT_PROMPT_INJECTION]: The skill logic involves parsing content from local files that could contain untrusted input.\n - Ingestion points: Data is read from
SKILL.mdandINDEX.mdfiles usingfind,grep, andsed, and search queries are extracted from~/.claude/skills/.search-log.jsonlusingjq.\n - Boundary markers: The processing scripts do not implement explicit delimiters or markers to isolate the text being analyzed.\n
- Capability inventory: The skill is limited to local file system reads and executing its own internal shell scripts. It possesses no network capabilities or permissions to write to sensitive system files.\n
- Sanitization: Content is processed strictly as text strings for validation and reporting purposes and is not executed or interpreted as code instructions.
Audit Metadata