skills/openai/plugins/get-context/Gen Agent Trust Hub

get-context

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [Command Execution]: The instructions direct the agent to run a 'preflight script' from the user-context skill when local shell access is available. This is a pattern for environment initialization, which involves executing code located within the local file system.
  • [Indirect Prompt Injection Surface]: The skill is designed to ingest data from diverse external sources, including Storybook instances, Figma files, and codebase paths. This creates a surface where the agent processes untrusted data which could potentially contain embedded instructions.
  • Ingestion points: Storybook, Figma files, codebase paths, reference images, and brand assets referenced in SKILL.md.
  • Boundary markers: The skill contains a 'Hard boundary' instruction to not create files or start servers until outcomes are clear, but lacks specific delimiters for external content.
  • Capability inventory: Shell access for preflight scripts and file system access for codebase paths.
  • Sanitization: No explicit sanitization or validation of the ingested external content is mentioned.
  • [Dynamic Execution]: The skill references 'Critical Overrides' and 'User Context' via relative file paths (e.g., ../index/SKILL.md). This modular approach to loading instructions at runtime is a design pattern used to manage complex agent behaviors across multiple files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 09:32 PM