ketchup

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill operates as a functional proxy for the '/catchup' tool. It is configured to read the target skill's definition from the local file system at ${CLAUDE_PLUGIN_ROOT}/skills/catchup/SKILL.md and execute that workflow using the user's provided arguments. This is a standard delegation pattern for creating command aliases within the agent environment.
  • [PROMPT_INJECTION]: The skill facilitates the passthrough of user-supplied parameters via $ARGUMENTS. It does not attempt to modify or interpret these inputs itself, instead relying on the safety protocols and input handling of the underlying target skill.
  • [DATA_EXPOSURE]: The skill accesses internal configuration paths within the plugin root to retrieve instruction sets. This access is restricted to the local skills directory and does not involve the exfiltration of sensitive user data or system credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 07:14 PM
Security Audit — agent-trust-hub — ketchup