trellis-finish-work
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes local Python scripts within the project's .trellis/scripts directory and standard Git commands to automate task management and session logging.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local script outputs and Git status to decide on task archival and commit verification steps. * Ingestion points: Output from get_context.py and git status processed during the workflow steps in SKILL.md. * Boundary markers: None. * Capability inventory: Shell command execution via python3 and git. * Sanitization: None.
Audit Metadata