sn-proactive-agent
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads software packages, including Python wheel files and OpenClaw plugins, from the author's official GitHub repository (github.com/OpenSenseNova/SenseNova-Skills-ProactiveAgent).
- [COMMAND_EXECUTION]: The installation and maintenance workflow involves executing shell commands such as
pipx install,gh release download, and various system environment checks (python3,node,uname). - [PERSISTENCE]: The instructions guide the user to run
pipx ensurepath, which modifies shell configuration files (e.g.,.bashrc,.zshrc) or system PATH variables to ensure the agent's CLI tools remain accessible across sessions. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and summarize multi-turn dialogue data (
runtime.jsonl,events.md) to generate project insights, which presents a potential attack surface if the ingested conversational data contains adversarial instructions.
Audit Metadata