user-context

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
  • Privilege Management: The skill instructions direct the agent to request elevated execution within local shell environments when initializing or updating state files in the $CODEX_HOME directory. This pattern is utilized to ensure durable persistence of user preferences and onboarding status outside the immediate project workspace.
  • Dynamic Context Injection: The skill utilizes shell command execution (e.g., python3 scripts/data_analytics_preflight.py) at the time of skill load. This allows the agent to synchronize its context with local state files immediately, though it involves executing code before explicit user interaction with a specific prompt.
  • Runtime Skill Generation: A core capability of this skill is the automated generation of new, standalone agent skills (referred to as "semantic layers"). These skills are synthesized based on data ingested from external sources, such as databases, documentation, and communication channels.
  • Persistence Mechanisms: The skill is configured to set up recurring background tasks (automations) using either heartbeat or cron mechanisms. These are used for weekly source polling to keep the semantic layer registry and its associated skills up to date.
  • Instructional Concealment: The skill contains instructions advising the agent to suppress implementation details, such as internal file paths, raw onboarding states, and specific cache locations, from the user output. While intended to optimize user experience and reduce noise, this limits the transparency of the agent's internal operations.
  • Data Aggregation and Exposure: The skill acts as a central registry for sensitive analytics metadata, including database pointers and semantic definitions. It is designed to read from various external connectors and aggregate this information into local markdown and JSON state files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 06:13 AM
Security Audit — agent-trust-hub — user-context