retro
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external session logs and primary source files to perform its retrospective analysis. These external data sources act as ingestion points where instructions could be embedded to influence the agent's logic or conclusions.
- Ingestion points: Session logs and primary source files as described in Step 2 of
SKILL.md. - Boundary markers: The skill does not define specific delimiters or instructions to ignore potential commands within the logs.
- Capability inventory: The agent possesses capabilities to read the local filesystem and search through session logs.
- Sanitization: There is no instruction provided for the agent to sanitize or filter the content of the logs before analysis.
- [COMMAND_EXECUTION]: The instructions direct the agent to identify and inspect existing repository scripts and check commands. In a development context, identifying these scripts is a precursor to their execution for verification purposes.
- Evidence: "Read the repo's own check command first (its package.json/build-tool lint/check scripts, its CI workflow)" found in the Automated checks section of
SKILL.md.
Audit Metadata