alcatchupaad
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npxto execute thealignfirstCLI tool for fetching ticket history and retrieval of protocol guides. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources that could contain malicious instructions.
- Ingestion points: External ticket history and the 'aad' protocol guide fetched via
npx alignfirst(SKILL.md). - Boundary markers: None identified in the instructions to delimit or warn against instructions within the fetched content.
- Capability inventory: The skill has the capability to execute shell commands via
npxand read/write work files as per the retrieved guide. - Sanitization: No explicit sanitization or validation of the fetched history or guide content is mentioned.
Audit Metadata